tbaji88 Privacy Policy — Your Data, Protected

1. Information We Collect

tbaji88 collects personal information from players in Bangladesh through several channels: directly when you register and use the platform, automatically as you navigate and interact with our services, and from trusted third-party service providers where necessary to deliver a safe and compliant gambling experience.

1.1 Information You Provide Directly

When you register a tbaji88 account or interact with our platform, you may be asked to provide the following categories of personal information:

• Identity data: Full legal name, date of birth, gender, and nationality.
• Contact data: Email address, mobile phone number, and residential address (including city — for example, Dhaka, Chittagong, Sylhet, Khulna, or Rajshahi).
• Identity verification documents: National ID card, passport, or driving licence, and proof of address such as a recent utility bill or bank statement.
• Financial data: Payment method identifiers (for example, registered bKash or Nagad mobile number, or the last four digits of a Visa or Mastercard), deposit and withdrawal history, and transaction amounts in BDT.
• Account credentials: Username and encrypted password hash. tbaji88 never stores passwords in plain text.
• Communications data: Messages and enquiries you send to our support team via email or live chat, including the content of those communications.

1.2 Information Collected Automatically

When you visit tbaji88.net or use our platform, certain technical data is collected automatically through cookies, log files, and similar technologies:

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and language settings.
• Usage data: Pages visited, games played, bets placed, session duration, click paths, and features accessed.
• Location data: Country and approximate regional location inferred from your IP address. We do not collect precise GPS coordinates.
• Cookie data: First-party session cookies, authentication tokens, and preference cookies. See Section 4 for full details.

1.3 Information from Third Parties

tbaji88 may receive limited personal data about you from the following categories of trusted third-party sources:

• Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks) to confirm transaction status and verify payment method ownership.
• Identity verification service providers used during the KYC (Know Your Customer) process.
• Fraud detection and anti-money-laundering screening services.
• Game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) who may share session and game history data to resolve disputes.

2. How We Use Your Data

tbaji88 processes your personal data only for specific, legitimate purposes. We rely on the following legal bases for processing, depending on the activity:

Purpose of Processing	Legal Basis	Examples
Account creation and management	Contractual necessity	Creating your player profile, processing login, managing preferences
Processing deposits and withdrawals	Contractual necessity	Verifying bKash/Nagad transactions, issuing BDT withdrawals
Identity verification (KYC)	Legal obligation	Confirming age (18+), verifying identity documents before withdrawals
Fraud prevention and security	Legitimate interest	Detecting duplicate accounts, flagging suspicious betting patterns
Responsible gaming compliance	Legal obligation	Monitoring play patterns, enforcing self-exclusion and deposit limits
Customer support	Contractual necessity	Resolving disputes, responding to account enquiries
Platform improvement and analytics	Legitimate interest	Analysing usage patterns, improving game lobby navigation
Marketing communications	Consent	Sending bonus offers, BPL/IPL promotions via SMS or email (opt-in only)

tbaji88 will never use your personal data for purposes that are incompatible with the ones listed above without first notifying you and, where required, obtaining your consent.

3. Data Sharing & Third Parties

tbaji88 operates as a data controller and engages a limited number of carefully vetted third-party data processors to support our platform operations. We do not sell your personal information to any third party under any circumstances. Data is shared only as described below.

3.1 Service Providers and Data Processors

We share your data with third-party service providers who act on our instructions and are contractually bound to keep your information confidential and secure. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card scheme partners (Visa, Mastercard) — to process deposits and withdrawals in BDT.
• KYC and identity verification providers: To confirm the authenticity of identity documents submitted for account verification.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — who receive your player ID and session data to operate game sessions and resolve any game-round disputes.
• Fraud and anti-money-laundering screening services: Who receive transaction and device data to flag potentially fraudulent activity.
• Cloud hosting and infrastructure providers: Who store platform data on secure servers. All hosting is subject to data processing agreements.
• Analytics platforms: Who receive anonymised or pseudonymised usage data to help us understand how players interact with the tbaji88 platform.

3.2 Legal Disclosures

tbaji88 may disclose your personal data to competent authorities, regulators, courts, or law enforcement agencies where we are required to do so by applicable law, court order, or regulatory directive. We will, where legally permitted, notify you of any such disclosure request before complying.

3.3 Business Transfers

In the event that tbaji88 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. If such a transfer occurs, we will provide notice on this page and ensure that the recipient is bound by privacy obligations no less protective than those described in this policy.

4. Cookies & Tracking Technologies

tbaji88 uses cookies and similar tracking technologies (including local storage, session tokens, and pixel tags) to operate the platform, personalise your experience, and analyse how players use our services. By continuing to use tbaji88.net, you consent to our use of cookies as described below.

4.1 Types of Cookies We Use

• Strictly necessary cookies: These are essential to the operation of the tbaji88 platform. They include session authentication cookies that keep you logged in during your visit and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without impairing core platform functionality.
• Functional cookies: These remember your preferences, such as your preferred language setting, default stake values, and notification preferences, so you do not need to reconfigure them on each visit.
• Analytics cookies: These collect anonymised data about how players navigate tbaji88 — which games are most popular, where players encounter difficulties, and how long sessions last. This data is used to improve the platform. Analytics cookies do not identify you personally.
• Marketing and personalisation cookies: If you have consented to receive personalised promotions, these cookies allow tbaji88 to tailor bonus offers and content recommendations based on your activity — for example, showing BPL cricket promotions to players who frequently bet on cricket markets.

4.2 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies from within their privacy settings menus. Please note that disabling strictly necessary cookies will prevent you from logging into your tbaji88 account and using core platform features. Disabling functional cookies may cause certain preferences to reset between sessions.

For more detailed guidance on managing cookies in your specific browser, refer to your browser provider's support documentation. tbaji88 does not currently respond to browser-level Do Not Track signals as no universal standard for these signals has been adopted.

5. Data Security Measures

tbaji88 takes the security of your personal data seriously and implements a layered set of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction.

5.1 Technical Safeguards

• TLS/SSL encryption: All data in transit between your device and tbaji88 servers is encrypted using current TLS protocols. Our website enforces HTTPS on every page.
• Password hashing: Account passwords are stored as salted cryptographic hashes. Plain-text passwords are never stored or transmitted.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of data access required to perform their role.
• Intrusion detection: Our infrastructure is monitored continuously for suspicious access patterns, brute-force login attempts, and other security anomalies.
• Payment data isolation: Full payment card numbers and sensitive payment credentials are never stored on tbaji88 servers. Payment processing is handled entirely by PCI-DSS-compliant payment partners.

5.2 Organisational Safeguards

• All tbaji88 staff and contractors who handle personal data receive data protection training and are bound by confidentiality obligations.
• Third-party service providers are vetted for their data security practices before being engaged and are required to maintain data processing agreements.
• tbaji88 conducts periodic internal security reviews and promptly remediates identified vulnerabilities.

6. Your Privacy Rights

As a tbaji88 player, you hold a number of rights over the personal data we process about you. tbaji88 respects these rights and will respond to verified requests within 30 days. The following rights apply to your tbaji88 account data:

• Right of access: You may request a copy of all personal data tbaji88 holds about you, along with information about how it is used and with whom it is shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For minor updates (email address, phone number), you can make changes directly in your account settings.
• Right to erasure: You may request that tbaji88 delete your personal data after you close your account, subject to legal retention obligations (see Section 7). Data that we are required to retain by law — such as transaction records — cannot be erased before the applicable retention period expires.
• Right to restrict processing: You may request that tbaji88 restrict the processing of your data in certain circumstances — for example, while you dispute the accuracy of data we hold, or while a complaint is being investigated.
• Right to data portability: Where processing is based on your consent or on a contract, you may request that tbaji88 provide your personal data to you in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where tbaji88 processes your data on the basis of your consent (such as for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object: You may object to the processing of your personal data where we rely on legitimate interests as our legal basis, unless we can demonstrate compelling legitimate grounds that override your interests.

To exercise any of the rights above, contact our privacy team by email at [email protected] with the subject line "Privacy Rights Request". We may ask you to verify your identity before processing your request to ensure that data is not disclosed to or acted upon by an unauthorised person.

7. Data Retention Policy

tbaji88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law. The following retention periods apply as general guidelines:

• Active account data: Retained for the duration of your tbaji88 account, plus any legally mandated post-closure retention period.
• Transaction and financial records: Retained for a minimum of 5 years from the date of the transaction, in line with standard anti-money-laundering record-keeping requirements.
• Identity verification documents: Retained for a minimum of 5 years after account closure or completion of the KYC process, whichever is later.
• Customer support communications: Retained for 3 years from the date of the last communication, to support dispute resolution.
• Analytics and usage data: Anonymised usage data may be retained indefinitely for platform improvement purposes. Identifiable usage data is retained for a maximum of 2 years.
• Marketing consent records: Retained for 3 years from the date consent was granted or last renewed, to demonstrate compliance with consent obligations.

When personal data is no longer required and its retention period has expired, tbaji88 will securely delete or anonymise the data so that it can no longer be attributed to an identified or identifiable individual.

8. Contact Our Privacy Team

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to report a privacy concern, please contact the tbaji88 privacy team using the following details:

• Email: [email protected] (subject line: "Privacy Enquiry" or "Privacy Rights Request")
• Response time: We aim to respond to all privacy-related enquiries within 5 business days and to formal data rights requests within 30 days.
• Operating hours: Our support team is available 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).

tbaji88 takes all privacy complaints seriously. If you are not satisfied with the response you receive, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.