Privacy Policy — tabjje

1. Introduction

tabjje ("we", "us", "our") operates the online casino and sports betting platform available at tabjje.net. This Privacy Policy describes how we collect, use, disclose, store, and protect personal information that we obtain from and about users ("you", "your") who access or use the tabjje platform, including all associated services, features, and content.

We take your privacy seriously. Our approach to data protection is grounded in the principle that we should collect only what we need, use it only for clearly defined purposes, and protect it with appropriate technical and organisational safeguards. This Policy is intended to give you a clear and complete picture of how your data is handled when you interact with tabjje.

This Privacy Policy should be read in conjunction with our Terms & Conditions and our Responsible Gaming policy, both of which form part of the overall agreement between you and tabjje.

2. Data Controller

tabjje is the data controller for all personal data collected through the tabjje.net platform. As data controller, we determine the purposes for which and the manner in which personal data is processed. If you have any questions or concerns about how your personal data is handled, please contact us using the details provided in Section 16 of this Policy.

Our designated privacy contact point is reachable at [email protected]. Please include "Privacy Enquiry" in the subject line of your message so that our team can route it to the appropriate department promptly.

3. Data We Collect

tabjje collects personal data in several categories, depending on how you interact with the platform. The categories of personal data we may collect include:

3.1 Identity Data

• Full legal name (first name, last name)
• Date of birth (collected to verify you are aged 18 or above)
• Gender (optional, where provided)
• Copies of government-issued identification documents (e.g., National ID card, passport) where requested for KYC verification

3.2 Contact Data

• Email address
• Mobile phone number (used for account verification and transaction notifications)
• Residential address (collected during KYC verification)

3.3 Financial Data

• Payment method identifiers (e.g., bKash mobile wallet number, Nagad account number, Rocket account number, Upay account number, masked Visa or Mastercard number)
• Transaction history (deposits, withdrawals, bonus credits)
• Proof of payment method ownership documents (where required for withdrawal verification)

3.4 Technical Data

• IP address
• Browser type and version
• Device type, operating system, and screen resolution
• Time zone setting
• Cookie identifiers and session tokens
• Pages visited and features accessed on the tabjje platform

3.5 Behavioural & Gaming Data

• Betting history, game session data, and game preferences
• Responsible gaming settings (deposit limits, cooling-off periods, self-exclusion status)
• Customer support interaction records

3.6 Communications Data

• Records of correspondence between you and tabjje, including support chat logs and email exchanges
• Marketing communication preferences

4. How We Collect Data

tabjje collects personal data through the following channels:

• Direct submission: Data you provide when registering an account, completing your profile, submitting a KYC verification request, making a deposit or withdrawal, contacting customer support, or adjusting your responsible gaming settings.
• Automated technologies: Technical data collected automatically as you use the platform, including cookies, session tracking, log files, and analytics tools. See Section 11 for more information on cookies.
• Third-party providers: Identity verification providers, payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), and fraud prevention services may share data with us in connection with transactions and account verification processes.

5. How We Use Your Data

tabjje uses the personal data we collect for the following purposes:

tabjje does not use your personal data for automated decision-making processes that have a significant legal or similarly significant effect on you without providing an opportunity for human review.

6. Legal Basis for Processing

tabjje processes your personal data on the following legal grounds:

• Contractual necessity: Processing that is necessary to fulfil our obligations under the Terms & Conditions agreement with you — including account management, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, KYC requirements, and mandatory record-keeping rules.
• Legitimate interests: Processing undertaken for tabjje's legitimate business interests, such as fraud prevention, platform security, and improving the user experience, provided these interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — for example, sending you marketing communications about promotions and new games. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

7. Data Sharing

tabjje does not sell your personal data. We may share your personal data with the following categories of third parties, strictly to the extent necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard — to process deposits and withdrawals on your behalf.
• Identity verification providers: Third-party KYC service providers that assist in verifying your identity and age in accordance with our compliance obligations.
• Fraud prevention and security services: Specialist providers that help us detect and prevent fraudulent activity, money laundering, and unauthorised access.
• Game content providers: Studios such as Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised or session-level data necessary to deliver game content. These providers do not receive your identity or financial data.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory demand, tabjje may disclose personal data to competent authorities.
• Professional advisers: Lawyers, auditors, and other professional advisers acting under confidentiality obligations, where disclosure is necessary for the operation of the business.

All third parties with whom tabjje shares personal data are required to handle that data securely, in accordance with applicable data protection standards, and only for the specified purpose for which it was shared.

8. International Data Transfers

tabjje primarily serves users in Bangladesh. Some of our third-party service providers — including KYC verification platforms, cloud hosting infrastructure, and game content providers — may process or store data outside of Bangladesh. Where such international transfers occur, tabjje takes steps to ensure that your personal data continues to be protected to a standard equivalent to that described in this Privacy Policy.

These steps may include implementing contractual data protection clauses with the relevant service provider, or relying on the provider's certification under a recognised data protection framework. If you have questions about the safeguards in place for any specific international transfer, please contact us at [email protected].

9. Data Retention

tabjje retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention principles are as follows:

• Active account data: Retained for the duration of your account's active status plus a reasonable period thereafter to allow for dispute resolution and legal compliance.
• Financial transaction records: Retained for a minimum of five years from the date of the transaction, in line with standard financial record-keeping obligations.
• KYC and identity verification documents: Retained for the period required by applicable anti-money laundering regulations, typically five years from the end of the business relationship.
• Customer support records: Retained for up to three years from the date of the last interaction, to support ongoing dispute resolution and quality assurance.
• Marketing preference records: Retained until you withdraw your consent or request deletion of your data.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

10. Security Measures

tabjje employs a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL (Secure Sockets Layer) encryption on all data transmissions between your device and the tabjje platform.
• Cryptographic hashing of account passwords — tabjje staff cannot view your password in plain text.
• Role-based access controls that restrict access to personal data to only those employees and contractors who require it for their specific role.
• Regular security assessments and vulnerability monitoring of the platform infrastructure.
• Fraud detection systems that monitor account activity for signs of unauthorised access or suspicious behaviour.
• Secure, access-controlled data storage environments for all personal and financial records.

While tabjje takes all reasonable steps to protect your personal data, no method of internet transmission or electronic storage is 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, tabjje will notify affected users in accordance with applicable legal obligations, as promptly as practicable.

11. Cookies & Tracking Technologies

tabjje uses cookies and similar tracking technologies (such as session tokens and local storage) to operate the platform, remember your preferences, and gather analytics data that helps us understand how users interact with the site. The categories of cookies we use are described below:

• Strictly necessary cookies: Required for the platform to function. These include session cookies that keep you logged in during a browsing session. You cannot opt out of these cookies without also opting out of using the platform.
• Functional cookies: Allow the platform to remember your preferences, such as your preferred language and responsible gaming settings, to provide a more personalised experience.
• Analytics cookies: Used to collect anonymised data about how visitors navigate and interact with the tabjje platform. This data helps us identify areas for improvement and measure the effectiveness of features.
• Session management tokens: Short-lived tokens that authenticate your session and protect against cross-site request forgery (CSRF) attacks.

Most web browsers allow you to control cookies through their settings. Disabling certain cookies may affect the functionality of the tabjje platform. For guidance on managing cookies in your specific browser, please refer to your browser's help documentation.

12. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by tabjje:

To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request". We will respond within a reasonable timeframe and in any event within 30 days of receiving your request. We may need to verify your identity before processing certain requests.

13. Minors

tabjje is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If you are a parent or guardian and believe that a minor has registered an account or provided personal information to tabjje, please contact us immediately at [email protected]. We will promptly investigate the matter and, where confirmed, delete the relevant data and close the account without delay.

tabjje employs age verification controls during the registration process to reduce the risk of underage access. Any account found to have been registered by a person under 18 years of age will be closed immediately and any funds associated with that account will be handled in accordance with applicable legal requirements.

14. Third-Party Links

The tabjje platform may, from time to time, reference third-party service providers or payment platforms by name (such as bKash, Nagad, Rocket, Upay, Visa, and Mastercard). These third parties operate their own platforms and are governed by their own privacy policies, which are entirely independent of this tabjje Privacy Policy.

tabjje is not responsible for the privacy practices, content, or security of any third-party platform. We strongly encourage you to review the privacy policy of any third-party service you interact with in connection with your tabjje account, particularly your chosen payment provider.

15. Changes to This Privacy Policy

tabjje may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. Where changes are material, we will notify registered users by posting a notice on the tabjje platform or by sending a notification to your registered contact details. The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision.

Your continued use of the tabjje platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated Policy. If you do not agree to the revised Policy, you must stop using the platform and contact customer support to close your account.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way tabjje handles your personal data, please contact our privacy team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please use "Privacy Enquiry" or "Data Rights Request" as appropriate
• Support Hours: 24 hours a day, 7 days a week
• Response Time: We aim to respond to all privacy enquiries within 30 days (Bangladesh Standard Time, UTC+6)

We take all privacy enquiries seriously and will respond as promptly as possible. For account closure requests, self-exclusion, or responsible gaming assistance, please visit our Responsible Gaming page or include the relevant subject line in your support message.