tb baji Privacy Policy

Section 1

Data We Collect

This Privacy Policy applies to all personal data collected, processed, and stored by tb baji in connection with your use of the tb baji online platform, accessible at tb-baji.com. It covers all services offered on the platform, including casino games, sports betting, account management, promotional activities, payment processing, and customer support interactions.

By registering an account with tb baji and using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this policy, you should not use the tb baji platform.

Personal Identification Data

When you register an account with tb baji, we collect the following personal identification data:

• Full legal name — as it appears on your national identity card (NID) or passport.
• Date of birth — to verify that you meet the 18+ age requirement.
• Email address — used for account communications, transaction confirmations, and promotional messages (with your consent).
• Mobile phone number — used for account authentication, security alerts, and support communications.
• Residential address — collected as part of the KYC verification process. We accept addresses from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and all other districts across Bangladesh.
• Government-issued identification documents — including NID, passport, or driving licence, submitted during KYC review.

Financial Data

To process deposits and withdrawals, tb baji collects and stores the following financial data:

• bKash, Nagad, Rocket, or Upay mobile account numbers associated with your transactions.
• Bank account details (account number and bank name) for players who use Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, or other Bangladeshi banking institutions for transactions.
• Visa and Mastercard partial card details (last four digits and expiry date) where card payments are used. Full card numbers are never stored by tb baji — these are processed directly by our PCI-DSS compliant payment processor.
• Transaction history — deposit amounts, withdrawal amounts, dates, and payment method used, retained for regulatory compliance purposes.

Technical and Behavioural Data

When you use the tb baji platform, we automatically collect certain technical data to ensure the platform functions correctly and to protect against fraud:

• IP address — used for geolocation, fraud prevention, and multi-account detection.
• Device type and operating system — to optimise platform performance for your device.
• Browser type and version — for compatibility and security purposes.
• Session data — pages visited, games played, bet amounts, session start and end times. This data is used in aggregate for platform analytics and responsible gaming monitoring.
• Referral source — how you arrived at the tb baji website, used to measure marketing effectiveness.

Customer Support Data

When you contact tb baji's support team via live chat or email, we retain records of the communication — including the content of your messages, the date and time of contact, and the outcome of any support request. This data is used to deliver consistent service, resolve disputes, and improve our support quality.

Section 2

How We Use Your Data

tb baji uses your personal data only for legitimate, clearly defined purposes that are necessary to deliver our services, comply with applicable legal obligations, and protect the security of the platform and its players. We do not use your data for purposes incompatible with those listed below.

Service Delivery

• Creating and maintaining your tb baji player account.
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, Visa, and Mastercard.
• Enabling you to play casino games, place sports bets, and access all platform features.
• Applying bonuses, calculating wagering requirements, and crediting loyalty points to your VIP account.
• Providing customer support and resolving disputes or technical issues.

Security and Fraud Prevention

• Verifying your identity and age as part of the KYC process, in compliance with responsible gaming obligations.
• Detecting and preventing fraudulent activity, multi-account registration, bonus abuse, money laundering, and other prohibited conduct described in our Terms & Conditions.
• Monitoring account activity for responsible gaming indicators, such as unusually rapid betting patterns, and triggering appropriate safeguards where necessary.
• Investigating security incidents and unauthorised account access.

Legal and Regulatory Compliance

• Maintaining transaction records as required by applicable financial compliance obligations.
• Responding to lawful requests from competent authorities, including court orders or regulatory investigations.
• Enforcing our Terms & Conditions and other platform policies.

Platform Improvement and Analytics

• Analysing aggregated, anonymised usage data to understand how players interact with the platform and to improve game selection, navigation, and performance.
• Testing new platform features and evaluating the performance of promotional campaigns.

Marketing Communications (with consent)

If you have opted in to receive marketing communications from tb baji, we may use your email address or mobile number to send you information about new games, promotions, bonuses, and platform updates. You can withdraw this consent at any time by contacting our support team or using the unsubscribe link in any marketing email. Withdrawal of marketing consent does not affect our ability to send you transactional communications (e.g., deposit confirmations, withdrawal notifications, security alerts) which are necessary for the operation of your account.

Section 3

Data Sharing & Disclosure

tb baji does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We share your data only in the limited circumstances described in this section, and only to the extent necessary for the specific purpose.

Payment Processors

To process your financial transactions, tb baji shares relevant payment data with authorised payment processing partners. These include bKash, Nagad, Rocket, Upay, and card processing networks (Visa, Mastercard) operating in Bangladesh. These processors are contractually required to handle your data in accordance with applicable data protection standards and are permitted to use your data only for the purpose of processing your transactions on our behalf.

Game Providers

The casino games and sports betting markets available on tb baji are supplied by third-party game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. To enable gameplay, certain session data (such as a player identifier and bet amounts) is transmitted to the relevant game provider's servers. Game providers are not permitted to use this data for any purpose other than delivering their games to you and are bound by data processing agreements with tb baji.

KYC and Identity Verification Partners

To fulfil our Know Your Customer (KYC) obligations, tb baji may use a third-party identity verification service to assist in the review of identity documents. Such partners process identity data strictly under tb baji's instructions and are not permitted to retain or use your identity documents for any independent purpose.

Legal and Regulatory Authorities

tb baji may disclose your personal data to law enforcement agencies, regulatory bodies, or other competent authorities if required to do so by a valid legal obligation, court order, or in connection with the prevention, investigation, or prosecution of fraud or other criminal activity. We will notify you of any such disclosure where we are legally permitted to do so.

Section 4

Cookies & Tracking Technologies

tb baji uses a limited set of cookies and similar technologies to ensure the platform functions correctly, to maintain your login session, and to gather aggregated analytics about how the site is used. We do not use cookies for cross-site tracking or third-party advertising purposes.

Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the platform to operate. They include session cookies that keep you logged in to your tb baji account, security tokens that protect against cross-site request forgery (CSRF), and cookies that remember your preferences (such as language or display settings). These cookies cannot be disabled without impairing the platform's functionality.
• Performance and Analytics Cookies: tb baji uses first-party analytics cookies to understand how players navigate the platform — which pages are visited most frequently, how long sessions last, and where navigation drop-offs occur. This data is collected in anonymised, aggregated form and is used exclusively to improve the tb baji platform. These cookies do not track you across other websites.
• Functional Cookies: These cookies remember choices you make on the platform, such as your preferred payment method or game lobby view, to provide a more personalised experience on your next visit.

Managing Cookies

You can manage or delete cookies through your browser settings at any time. Most modern browsers (Chrome, Firefox, Safari, Edge) allow you to view, disable, or delete cookies via their privacy or security settings menus. Please note that disabling strictly necessary cookies will impair your ability to log in to and use the tb baji platform. Disabling performance or functional cookies will not prevent you from using the platform, but some personalisation features may not work as expected.

No Third-Party Tracking

tb baji does not embed third-party advertising trackers, social sharing buttons with tracking capabilities, or external analytics services that collect personally identifiable data on our platform. Your browsing activity on tb baji is not shared with any advertising network.

Section 5

Data Security

tb baji implements robust technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme is designed to be proportionate to the sensitivity of the data we hold and the risks associated with operating an online gambling platform serving players across Bangladesh.

Technical Security Measures

• SSL/TLS encryption: All data transmitted between your browser and the tb baji platform is encrypted using TLS (Transport Layer Security), the industry standard for securing web communications. Our SSL certificate is kept current and renewed proactively.
• Password hashing: Player passwords are never stored in plain text. They are processed using industry-standard one-way cryptographic hashing algorithms (bcrypt or equivalent) before storage, ensuring that even tb baji's own technical staff cannot read your password.
• Encrypted data storage: Sensitive personal data, including identity documents submitted for KYC review, is stored in encrypted form at rest using AES-256 encryption or equivalent.
• Access controls: Access to personal data held by tb baji is restricted to authorised personnel on a strict need-to-know basis. All staff with access to player data are subject to confidentiality obligations.
• Fraud monitoring: tb baji operates automated fraud detection systems that continuously monitor account activity for signs of unauthorised access, unusual transaction patterns, and multi-account behaviour.
• Security patching: Our platform infrastructure is maintained on a regular patching schedule to address known security vulnerabilities promptly.

Your Role in Keeping Your Account Secure

While tb baji takes extensive measures to protect your data on our side, account security is a shared responsibility. You play an important role in keeping your account secure by:

• Choosing a strong, unique password for your tb baji account and not reusing it on other websites.
• Never sharing your login credentials with any other person, including family members.
• Logging out of your account when using a shared or public device.
• Contacting tb baji support immediately at [email protected] if you suspect your account has been accessed without your authorisation.

Section 6

Data Retention

tb baji retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply to the main categories of data we hold.

• Account data (name, email, mobile number, address): Retained for the duration of your active account plus a minimum of five years following account closure, in accordance with financial record-keeping obligations.
• KYC and identity documents: Retained for a minimum of five years following account closure or the completion of the relevant transaction, whichever is later, to comply with anti-money laundering record-keeping requirements. Documents are deleted securely once the retention period expires.
• Transaction records (deposits, withdrawals, bet history): Retained for a minimum of five years following the date of each transaction for financial compliance purposes.
• Customer support records: Retained for up to three years from the date of the support interaction, to facilitate dispute resolution and service quality improvement.
• Marketing consent records: Retained for the duration of your consent, plus a reasonable period thereafter to demonstrate compliance in the event of a complaint or audit.
• Technical and session data: Retained in anonymised, aggregated form for up to 24 months for analytics purposes. Identifiable session logs are retained for up to 12 months for fraud investigation and security purposes.

Deletion and Anonymisation

At the end of the applicable retention period, tb baji will either securely delete your personal data or anonymise it in such a way that it can no longer be linked back to you as an individual. Anonymised data may be retained indefinitely for statistical and analytics purposes.

If you request deletion of your personal data before the end of an applicable legal retention period, tb baji will restrict processing of your data to the extent required by law, and will delete it as soon as the legal retention period expires. We will inform you of the applicable retention period at the time of your deletion request.

Section 7

Your Privacy Rights

As a player on the tb baji platform, you have a number of rights with respect to your personal data. tb baji is committed to respecting and facilitating the exercise of these rights. To exercise any of the rights described below, please contact our support team via live chat or by emailing [email protected]. We aim to respond to all privacy rights requests within 30 days of receipt.

Right of Access

You have the right to request a copy of the personal data that tb baji holds about you. Upon a valid access request, we will provide you with a summary of the categories of data held, the purposes for which it is processed, and, where technically feasible, a copy of the data itself. We will provide this information in a clear, plain-English format.

Right to Rectification

If any of the personal data tb baji holds about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You may update certain account details (such as your email address or mobile number) directly through your account settings. For corrections to identity documents or other sensitive data, please contact support.

Right to Erasure ("Right to be Forgotten")

You may request that tb baji delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent on which processing was based, or where processing was unlawful. Please note that this right is subject to legal retention obligations — tb baji is required to retain certain data (such as transaction records) for a minimum of five years regardless of a deletion request. We will inform you clearly of any such limitations when responding to your request.

Right to Restrict Processing

You have the right to request that tb baji restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being considered. Data subject to a processing restriction will be stored but not actively used.

Right to Object to Marketing

Where tb baji processes your personal data for direct marketing purposes (promotional emails, SMS offers), you have the absolute right to object to that processing at any time. To opt out of marketing communications, contact our support team or use the unsubscribe mechanism provided in any marketing message. Your objection will be actioned immediately.

Right to Data Portability

Where tb baji processes your personal data on the basis of your consent or as part of a contract with you, and where processing is carried out by automated means, you have the right to receive a copy of your data in a structured, commonly used, machine-readable format (such as CSV or JSON). You may request data portability by contacting our support team.

Section 8

Policy Updates & Contact

tb baji reviews and updates this Privacy Policy periodically to reflect changes in our data practices, the services we offer, and applicable legal requirements. When material changes are made to this policy, registered players will be notified via the email address on their account or via a prominent notice on the tb baji platform. The "last updated" date at the top of this page will be revised with each update.

Your continued use of the tb baji platform following notification of a material change to this Privacy Policy constitutes your acceptance of the updated policy. If you do not agree with a material change, you should close your account by contacting our support team before the change takes effect.

Minor, non-material updates (such as clarifications of existing practices, correction of typographical errors, or updated contact details) may be made without specific notification, although the updated date on this page will always reflect the most recent revision.

How to Contact Us About Privacy

For any questions, concerns, or requests related to this Privacy Policy or the way tb baji handles your personal data, please contact our Data Protection team using the details below. Our support staff are available 24 hours a day, seven days a week, at Bangladesh Standard Time (BST, UTC+6).

• Email: [email protected]
• Live Chat: Available directly on the tb baji platform, 24/7
• WhatsApp: +880 1700-000000 (available during Bangladesh Standard Time business hours)

We aim to respond to all privacy-related enquiries within 5 business days, and to all formal data subject rights requests within 30 calendar days of receipt. If a request is particularly complex or voluminous, we may extend this period by an additional 30 days, in which case we will notify you of the extension and the reason for it.

This Privacy Policy was last updated in January 2026 and applies to all players registered on the tb baji platform. The English-language version of this policy is the authoritative version. For any queries, contact our support team at [email protected].