Privacy Policy

Privacy at a Glance

A summary of our key privacy commitments to tbaji players in Bangladesh.

1. Introduction

This Privacy Policy ("Policy") describes how tbaji ("we", "us", "our", "the Platform") collects, uses, stores, shares and protects personal information relating to users ("you", "your") of the tbaji website located at tbaji.lat and all associated services, games, betting markets and payment features accessible through the Platform (collectively, the "Services"). tbaji is committed to handling your personal data responsibly, transparently and in accordance with applicable data protection principles.

By using the Services you acknowledge that you have read and understood this Policy and agree to the collection and use of your personal data as described herein. If you do not agree with this Policy you should cease using the Platform immediately. This Policy should be read together with our Terms and Conditions, which are available at /terms-conditions.

2. Information We Collect

tbaji collects personal information in several ways, including directly from you when you register, make a deposit or contact support, automatically when you use the Platform, and from third-party payment processors and identity verification services. The categories of personal information we collect include:

• Registration and identity data — full name, date of birth, mobile phone number, and any identity documents submitted for KYC verification such as a National ID card or passport.
• Financial data — deposit amounts, withdrawal requests, transaction history, and the mobile financial service account identifiers (e.g. bKash or Nagad account numbers) used for transactions. Full payment credentials are never stored by tbaji; they are processed directly by the payment provider.
• Usage and gaming data — games played, bets placed, session durations, win and loss records, bonus usage, and in-game behaviour data. This data is used to provide the Services and for responsible gaming monitoring.
• Device and technical data — IP address, device type, operating system, browser type, mobile network carrier, and approximate geographic location derived from IP address. This data is used for security, fraud prevention and service optimisation.
• Communication data — messages sent to tbaji support, including the content of support chat transcripts, emails and any feedback or complaints submitted through the Platform.

Where we are required by applicable anti-money laundering regulations to collect additional identity documentation or conduct enhanced due diligence, we will notify you of this requirement and explain how the additional data will be used and stored.

3. How We Use Your Information

tbaji uses the personal data we collect for the following purposes:

• To provide and operate the Services, including processing your account registration, verifying your identity, processing deposits and withdrawals, and enabling you to place bets and play games.
• To communicate with you about your account, including sending transaction notifications, security alerts, KYC verification requests and responses to your support queries.
• To ensure platform security and prevent fraud, including detecting and investigating suspicious account activity, multiple account violations, money laundering, match-fixing and bot usage.
• To comply with our legal and regulatory obligations, including anti-money laundering (AML) requirements, age verification mandates and any reporting obligations imposed by applicable law.
• To improve the Platform and Services, including analysing usage patterns, conducting A/B testing of new features, optimising game loading times on Bangladeshi mobile networks and personalising your experience.
• To send you promotional communications about bonuses, free spins, sports betting offers and other tbaji promotions, where you have consented to receive such communications or where we have a legitimate interest in doing so. You may opt out of marketing communications at any time.

4. Legal Basis for Processing

tbaji processes your personal data on the following legal bases:

• Contractual necessity — processing required to provide the Services you have requested, including account management, payment processing and game delivery.
• Legal obligation — processing required to comply with applicable laws and regulations, including AML obligations, age verification requirements and any obligations to report suspicious activity.
• Legitimate interests — processing conducted for tbaji's legitimate business interests, including fraud prevention, platform security, service improvement and responsible gaming monitoring, where these interests are not overridden by your rights and interests.
• Consent — where you have given your explicit consent to processing for a specific purpose, such as receiving promotional communications. You may withdraw consent at any time by contacting tbaji support.

5. Sharing Your Personal Data

tbaji does not sell your personal data to third parties. We share your data only in the following limited circumstances:

• Payment processors — we share transaction-relevant data (such as your transaction reference and the amount) with bKash, Nagad, Rocket, Upay and our banking partners to process your deposits and withdrawals. These processors are bound by strict data protection obligations.
• Game and technology providers — game providers such as Pragmatic Play, Evolution Gaming and Spribe receive limited session and game-play data necessary to operate their games on the tbaji Platform. This data is processed under strict contractual obligations.
• Identity verification services — where KYC verification is required, your identity documents and biometric data may be shared with our trusted identity verification partner. This partner processes data solely for verification purposes and is prohibited from using it for any other purpose.
• Regulatory and law enforcement authorities — where required by applicable law or court order, tbaji may disclose your personal data to relevant regulatory authorities or law enforcement bodies. We will notify you of any such disclosure where legally permitted to do so.

6. Payment Data and Financial Security

tbaji takes the security of payment data with the utmost seriousness. When you make a deposit using bKash, Nagad, Rocket, Upay or a bank transfer, your payment credentials (mobile wallet PIN, bank account number, card details) are entered directly into the payment provider's secure interface and are never transmitted to or stored by tbaji's servers. tbaji receives only a transaction confirmation reference and the transaction amount.

Transaction records — including the payment method used, amount, date and transaction reference — are stored by tbaji for a minimum period required by applicable financial regulations for audit and anti-money laundering purposes. These records are stored securely and accessed only by authorised tbaji personnel with a legitimate operational need.

7. Cookies and Tracking Technologies

tbaji uses cookies and similar tracking technologies on the Platform. Cookies are small text files placed on your device that help the Platform function correctly, remember your preferences and analyse usage. The types of cookies we use are:

• Essential cookies — required for the Platform to function. These include session authentication cookies, security tokens and load-balancing cookies. These cannot be disabled without preventing the Platform from operating correctly.
• Analytics cookies — used to collect anonymised data about how players navigate and use the Platform, including which pages are most visited, session duration and game preferences. This data helps us improve the user experience for Bangladesh players.
• Preference cookies — used to remember your language setting, display preferences and other personalisation choices so that you do not need to re-enter them each time you visit the Platform.

You can control and delete cookies through your browser settings. Please note that disabling essential cookies will affect the functionality of the Platform. For mobile users on Android or iOS, cookie preferences can be managed through your browser application settings. tbaji does not use third-party advertising cookies or cross-site tracking technologies.

8. Data Retention

tbaji retains your personal data for as long as your account is active and for a period thereafter as required by applicable law and regulation. In particular, transaction records and identity verification documents are retained for a minimum period required by applicable anti-money laundering and financial regulations, which is typically five years from the date of the relevant transaction or the closure of your account, whichever is later.

When you close your account or request deletion of your data, tbaji will delete or anonymise your personal data within a reasonable period, subject to any retention obligations imposed by applicable law. Data that is subject to mandatory retention will be securely stored in a restricted-access archive and will not be used for any operational or marketing purpose during the retention period.

9. Your Data Rights

tbaji respects your rights over your personal data. The following rights are available to you as a tbaji player. To exercise any of these rights, contact tbaji support at [email protected] with your registered mobile number and a description of your request. We will respond within a reasonable timeframe.

To exercise any of the rights above, please contact tbaji support at [email protected]. Include your registered mobile number and clearly describe the right you wish to exercise. tbaji will acknowledge your request promptly and respond fully within a reasonable period. In some cases, tbaji may need to verify your identity before processing your request.

10. Data Security Measures

tbaji implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include 256-bit SSL/TLS encryption for all data in transit between your device and tbaji's servers, encryption of sensitive data fields at rest, access controls limiting data access to authorised personnel only, regular security audits and vulnerability assessments, and monitoring for unusual account activity patterns that may indicate a security incident.

While tbaji takes data security seriously and employs industry-standard protections, no system is entirely immune to security risks. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, tbaji will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach. You can help protect your account by using a strong, unique password and never sharing your login credentials with any third party.

11. Children and Minors

The tbaji Platform is strictly for adults aged 21 and above. tbaji does not knowingly collect or process personal data relating to persons under the age of 21. If tbaji becomes aware that personal data has been collected from a person under 21 without appropriate parental consent, that data will be deleted immediately and the associated account will be closed. If you believe that a minor has registered on the Platform or that tbaji holds personal data relating to a minor, please contact [email protected] immediately.

12. Changes to This Privacy Policy

tbaji reserves the right to update or amend this Privacy Policy at any time. When we make material changes to this Policy, we will update the "Last Updated" date at the top of this page and, where practicable, notify registered players via their registered mobile number or email address. The updated Policy will be effective from the date it is posted on the Platform.

Your continued use of the Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically to stay informed about how tbaji protects your personal data. If you do not agree with any changes to this Policy, you should stop using the Platform and may request account closure by contacting tbaji support.

13. Contact Us About Privacy

If you have any questions, concerns or requests relating to this Privacy Policy or the way tbaji processes your personal data, please contact our support team. We are committed to addressing all privacy-related enquiries promptly and transparently.

Email: [email protected] — Please include your registered mobile number and clearly describe your privacy-related query or request. Our team is available 24/7 and will respond as quickly as possible.