tbaj Privacy Policy

Our Privacy Commitments at a Glance

The six commitments below summarise tbaj's core approach to protecting your personal data. They do not replace the full Privacy Policy text — please read all sections below for complete details.

1. Introduction

tbaj ("we", "us", "our") operates the online casino and sportsbook platform accessible at tbaj.one. This Privacy Policy sets out in detail how tbaj collects, processes, stores, and protects personal data provided by or generated by users ("you", "your") of our platform. It applies to all interactions with the tbaj platform, including account registration, deposits, gameplay, withdrawals, customer support communications, and marketing preferences.

By registering an account or continuing to use the tbaj platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside the tbaj Terms and Conditions.

2. Information We Collect

Information You Provide Directly

When you register for a tbaj account or interact with our platform, you provide us with personal information that may include:

• Full legal name, date of birth, and gender, as required for age verification and KYC compliance.
• Residential address, city, and postal code — your Dhaka, Chittagong, Sylhet, or other Bangladesh address where applicable.
• Email address and mobile phone number used for account communications, verification codes, and support.
• Government-issued identity document details (e.g. National ID card number, passport number) submitted as part of KYC verification.
• Payment method details, including your registered bKash, Nagad, Rocket, or Upay mobile wallet number and any associated bank account information required for withdrawals.

Information Collected Automatically

When you use the tbaj platform, our systems automatically collect certain technical and behavioural data, including:

• IP address, device type, operating system, browser version, and unique device identifiers used to access the tbaj platform.
• Session data, including login and logout timestamps, pages visited, features used, and duration of activity on the platform.
• Betting and gaming history, including wagers placed, game selections, bet amounts, and outcomes, for account management and responsible gaming monitoring.
• Transaction records for all deposits and withdrawals, including payment method used, amounts, timestamps, and processing reference numbers.

Information from Third Parties

tbaj may receive personal data about you from third-party identity verification providers, payment processors, fraud prevention agencies, and credit reference agencies, where this is necessary for KYC compliance, AML obligations, or fraud detection. We may combine this third-party data with information we already hold on your account to ensure a complete and accurate record.

3. How We Use Your Information

tbaj uses the personal data we collect for the following purposes:

• Account creation, management, and verification — to register your tbaj account, verify your identity and age, and maintain your account in good standing.
• Payment processing — to securely process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate financial records.
• Legal and regulatory compliance — to fulfil our obligations under applicable anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, and other applicable laws.
• Platform security and fraud prevention — to detect, investigate, and prevent fraudulent transactions, account misuse, and other harmful or illegal activities on the tbaj platform.
• Customer support — to respond to your enquiries, process complaints, and provide assistance with account, payment, or gameplay issues.
• Responsible gaming — to monitor your gaming behaviour for signs of problem gambling, to apply self-exclusion or deposit limits when requested, and to provide responsible gaming tools and guidance.
• Service improvement and analytics — to analyse usage patterns and platform performance in order to improve the quality, reliability, and features of tbaj services.

4. Legal Basis for Processing

tbaj processes your personal data on the following legal bases:

• Contractual necessity — processing required to fulfil our obligations to you under the tbaj Terms and Conditions, including account management, payment processing, and service delivery.
• Legal obligation — processing necessary to comply with applicable laws and regulations, including AML requirements, KYC obligations, and regulatory reporting duties.
• Legitimate interests — processing necessary for fraud detection, platform security, and service improvement, where these interests are not overridden by your rights and interests.
• Consent — processing for direct marketing communications, where you have given your explicit and freely given consent, which you may withdraw at any time.

5. Sharing Your Information

tbaj does not sell, rent, or trade your personal data to third parties. We share your data only in the limited circumstances described below, and only where such sharing is strictly necessary or legally required.

Service Providers

tbaj engages trusted third-party service providers to support the operation of our platform. These include payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), identity verification providers, cloud hosting providers, and customer support tools. Each service provider is contractually bound to process your data only for the specific purpose for which it was shared, and to maintain appropriate security standards.

Legal and Regulatory Authorities

tbaj may be required by law, court order, or regulatory instruction to disclose personal data to competent authorities. This may include disclosures to financial intelligence units, law enforcement agencies, or regulatory bodies in connection with AML investigations, fraud inquiries, or other legal proceedings. tbaj will notify you of such disclosures where legally permitted to do so.

Business Transfers

In the event that tbaj undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you of any such transfer and ensure the receiving entity is bound by terms no less protective of your data than this Privacy Policy.

6. Cookies and Tracking Technologies

tbaj uses cookies and similar tracking technologies on its platform to enhance functionality, analyse usage, and maintain session security. The types of cookies we use include:

• Strictly necessary cookies — essential for the platform to function correctly, including session management, login state, and security tokens. These cannot be disabled.
• Functional cookies — used to remember your preferences such as language settings, game history, and responsible gaming tool configurations.
• Analytics cookies — used to collect aggregated, anonymised data about how users interact with the platform, helping us identify areas for improvement.
• Marketing cookies — used, with your consent, to deliver relevant promotional communications about tbaj bonuses, new games, and seasonal offers.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the tbaj platform and your gaming experience. Continued use of the tbaj platform after being presented with our cookie notice constitutes your acceptance of our use of cookies as described above.

7. Data Retention

tbaj retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law. Specifically: active account data is retained for the duration of your account's active status plus a minimum of five years after account closure, in line with standard AML record-keeping obligations. Transactional records are retained for a minimum of five years following the date of the transaction. Marketing preference data is retained until you withdraw consent or request deletion. Data collected for responsible gaming monitoring is retained for the lifetime of your account and for five years after closure to support any future investigation.

When data is no longer required and no legal retention obligation applies, tbaj will securely delete or anonymise it in accordance with our internal data destruction procedures.

8. Data Security

tbaj takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• SSL/TLS encryption for all data transmitted between your device and the tbaj platform.
• Encryption of sensitive data at rest, including payment details and identity documents, using industry-standard encryption algorithms.
• Role-based access controls ensuring that only authorised tbaj personnel with a genuine business need may access your personal data.
• Regular security assessments, penetration testing, and vulnerability scans to identify and remediate security weaknesses in our platform infrastructure.

While tbaj employs robust security measures, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, tbaj will notify you without undue delay and take all steps necessary to contain and remediate the breach.

9. Your Data Rights

As a tbaj account holder, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected]:

• Right of access — you may request a copy of all personal data tbaj holds about you, together with information about how it is being processed.
• Right to rectification — you may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restrict processing — you may request that tbaj limits the way it processes your data in certain circumstances, for example while a dispute about its accuracy is being resolved.
• Right to data portability — you may request that tbaj provides your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to object — you may object to tbaj processing your data based on legitimate interests, including for direct marketing purposes. Where you object to marketing, we will stop immediately.

tbaj will respond to all data rights requests within 30 days of receipt. Where a request is complex or where we receive a high volume of requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

10. Third-Party Links and Services

The tbaj platform may contain references to third-party game providers such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi. While tbaj selects its game providers carefully, we are not responsible for the privacy practices of these third-party providers. Game software is delivered via secure integration, and tbaj does not share your personal account data with game providers beyond what is technically necessary to deliver the game. We encourage you to review the privacy policies of any third-party providers whose services you access.

11. Children's Privacy

The tbaj platform is strictly intended for adults aged 21 and above. tbaj does not knowingly collect personal data from any person under the age of 21. If we become aware that we have inadvertently collected personal data from a person under 21, we will immediately delete that data from our systems and close the associated account. If you believe that a person under 21 has registered on tbaj, please notify us immediately at [email protected].

12. International Data Transfers

tbaj's platform infrastructure may involve the transfer and processing of your personal data in jurisdictions outside Bangladesh. Where such transfers occur, tbaj ensures that appropriate safeguards are in place to protect your data to a standard equivalent to this Privacy Policy, including contractual data protection clauses with all relevant service providers and data processors. tbaj does not transfer your data to any country or territory where adequate data protection standards cannot be assured.

13. Changes to This Privacy Policy

tbaj reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where we introduce a new purpose for processing your data or change the categories of third parties with whom we share it — we will provide advance notice by email to your registered address or by prominent notice on the tbaj platform before the changes take effect.

The most current version of this Privacy Policy will always be available on the tbaj website. The date shown in the "Last Updated" field indicates when this Policy was most recently revised. Continued use of the tbaj platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how tbaj handles your personal information, please contact our privacy team. We aim to respond to all privacy-related enquiries within 24 hours Bangladesh Standard Time (BST, UTC+6).

Email: [email protected]