tbajje Privacy Policy

1 What Data We Collect

When you register, use, or interact with the tbajje platform, we may collect the following categories of personal data:

2 How We Use Your Data

tbajje uses the personal data it collects for the following specific, legitimate purposes:

• Account creation and management: To register your account, verify your identity and age (21+ requirement), and maintain your account in good standing throughout your use of the platform.
• Service delivery: To enable you to deposit funds, place wagers, play games, participate in live dealer tables and sports betting markets, and withdraw winnings to your verified payment method.
• Identity and age verification (KYC): To comply with our Know Your Customer obligations, confirm that you are at least 21 years of age, and verify that you are the legitimate holder of the payment methods linked to your account.
• Fraud prevention and security: To detect and prevent unauthorised account access, fraudulent transactions, bonus abuse, money laundering, and other prohibited activities on the tbajje platform.
• Anti-money laundering (AML) compliance: To monitor transaction patterns, flag suspicious activity, and fulfil our reporting obligations under applicable financial crime prevention requirements.
• Responsible gaming: To monitor your gaming behaviour for signs of problem gambling, enforce deposit limits and self-exclusion requests, and proactively contact players who may require support.
• Customer support: To respond to your enquiries, resolve complaints, and communicate with you about your account, transactions, or technical issues.
• Promotions and personalisation: To send you relevant bonus offers, promotional updates, and personalised recommendations based on your gaming history — but only where you have consented to receive such communications or where we have a legitimate interest in doing so. You may opt out at any time.
• Platform improvement: To analyse aggregated, anonymised usage data and improve the performance, reliability, and features of the tbajje platform.
• Legal compliance: To comply with any applicable laws, regulations, court orders, or lawful requests from regulatory or law enforcement authorities.

3 Legal Basis for Processing

tbajje processes your personal data on the following legal grounds:

• Contractual necessity: Processing your account data, transaction records, and identity verification information is necessary for tbajje to fulfil its contractual obligations to you as a registered player.
• Legal obligation: KYC verification, AML monitoring, age verification, and record-keeping are required by applicable law. tbajje is legally required to collect and retain this data.
• Legitimate interests: Fraud detection, platform security, responsible gaming monitoring, and aggregated analytics are carried out on the basis of tbajje's legitimate interests in operating a safe and reliable platform, where those interests are not overridden by your rights and interests.
• Consent: Sending you marketing communications, promotional offers, and personalised recommendations is carried out only with your consent, which you may withdraw at any time by contacting tbajje support or updating your notification preferences in your account settings.

4 Sharing Your Data

tbajje does not sell your personal data. We may share your data with third parties only in the following limited and controlled circumstances:

• Payment processors: We share necessary financial data with bKash, Nagad, Rocket, Upay, Visa, Mastercard, and our banking partners to process your deposits and withdrawals securely. These processors are contractually bound to handle your data only as instructed by tbajje.
• Identity verification providers: We use trusted third-party KYC service providers to verify identity documents and confirm age eligibility. These providers operate under strict data processing agreements and do not retain your data beyond what is required for the verification process.
• Game software providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data necessary to render their games. They do not receive personally identifiable information beyond what is technically required to deliver their software.
• Legal and regulatory authorities: tbajje may disclose your data to law enforcement, regulatory bodies, or courts where required by law, in response to a valid legal request, or to protect the rights and safety of tbajje, its employees, or its players.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the tbajje business, your personal data may be transferred as part of that transaction. You will be notified in advance of any such transfer and of any material changes to this Privacy Policy that may result from it.

In all cases, tbajje takes reasonable steps to ensure that any third party receiving your data is bound by appropriate confidentiality and data protection obligations.

5 Cookies and Tracking Technologies

tbajje uses cookies and similar tracking technologies on the tbajje.bio website to provide a functional, personalised, and secure user experience. The categories of cookies used are as follows:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in, security tokens that prevent cross-site request forgery, and cookies that remember your language and display preferences. These cookies cannot be disabled without significantly impairing your use of the platform.
• Analytics cookies: Used to collect anonymised data about how players navigate the tbajje platform — which pages are visited most frequently, how long sessions last, and where players encounter errors. This data helps us improve the platform over time.
• Preference cookies: Store your platform settings and preferences (such as your preferred game category or notification settings) so that they are remembered between sessions.
• Marketing cookies: Used only with your consent to measure the effectiveness of tbajje's promotional campaigns and to deliver relevant offers to returning players. You may withdraw consent for marketing cookies at any time through your browser settings.

You can control the use of non-essential cookies through your browser settings at any time. Disabling certain cookies may affect the functionality of some features on the tbajje platform. tbajje does not use third-party advertising networks or social media tracking pixels that share your data with unrelated platforms.

6 Data Retention

tbajje retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the full duration of your account's existence on the tbajje platform.
• Transaction and betting records: Retained for a minimum of five years from the date of the transaction, in line with standard financial record-keeping obligations.
• KYC and identity documents: Retained for a minimum of five years following the closure of your account, or longer where required by applicable anti-money laundering law.
• Customer support communications: Retained for three years from the date of the last communication, unless the subject matter relates to an ongoing dispute, in which case records are retained until the dispute is fully resolved.
• Marketing preference records: Retained for as long as your account is active and for a further two years following account closure, to ensure that opt-out preferences are honoured.
• Anonymised analytics data: Retained indefinitely in aggregated, anonymised form that cannot be used to identify individual players.

When your personal data is no longer required, tbajje will securely delete or irreversibly anonymise it in accordance with our internal data lifecycle procedures.

7 Your Privacy Rights

As a tbajje player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the tbajje data team at [email protected] with the subject line "Privacy Request" and your registered account email address.

• Right of access: You may request a copy of the personal data tbajje holds about you at any time. We will provide this information in a clear and accessible format within 30 days of your verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected or updated. Changes to core identity data may require re-verification.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing based on legitimate interests. Note that erasure requests may be limited where we are required by law to retain certain records.
• Right to restriction: You may request that tbajje temporarily suspend the processing of your personal data in certain circumstances, for example while a dispute about data accuracy is being resolved.
• Right to data portability: Where processing is based on consent or contractual necessity, you may request that your data be provided to you in a structured, machine-readable format, or transferred directly to another service provider where technically feasible.
• Right to object: You may object to processing based on legitimate interests or direct marketing at any time. tbajje will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on consent (such as marketing communications), you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

8 Security Measures

tbajje employs a layered approach to data security designed to protect your personal and financial information against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and tbajje servers.
• Encrypted storage of sensitive data at rest, including identity documents and financial records.
• Role-based access controls ensuring that tbajje staff can only access the personal data necessary for their specific job function.
• Regular security audits and vulnerability assessments conducted by internal and external security specialists.
• Multi-factor authentication options available on player accounts to prevent unauthorised access.
• Automated fraud detection systems that flag unusual account activity in real time.
• Strict vendor security requirements for all third-party service providers that process tbajje player data.

While tbajje takes all reasonable steps to protect your data, no security system is entirely impenetrable. You are encouraged to use a strong, unique password for your tbajje account and to contact [email protected] immediately if you suspect any unauthorised access to your account.

9 Children and Minors

The tbajje platform is strictly restricted to individuals aged 21 years and above. tbajje does not knowingly collect personal data from any person under the age of 21. If tbajje becomes aware that personal data has been collected from a minor, that data will be deleted immediately and the associated account will be permanently closed. If you believe that a minor has registered on the tbajje platform, please notify us immediately at [email protected].

10 Changes to This Privacy Policy

tbajje may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, registered players will be notified via their registered email address or through a prominent notice on the tbajje platform. The "Last updated" date at the top of this page indicates when the policy was most recently revised.

Your continued use of the tbajje platform following notification of changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with any changes, you must discontinue use of the platform and may request account closure by contacting tbajje support.

11 Contact and Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by tbajje, please contact us by email at: [email protected]. Please include "Privacy Request" in the subject line and provide your registered account email address so that we can process your request promptly.

tbajje aims to respond to all privacy-related enquiries within 10 business days. For complex data subject requests, we will acknowledge your request within 5 business days and provide a full response within 30 days. All responses will be provided in English.