tabaji Privacy Policy

1.1 Registration Data

When you create a tabaji account, we collect the information you provide directly, including your full legal name, date of birth, email address, mobile phone number, and residential address. This information is required to create and manage your account and to verify that you meet the minimum age requirement of 21 years.

1.2 Identity Verification (KYC) Data

To comply with our Know Your Customer (KYC) obligations, we may collect copies of government-issued identity documents (National ID card, passport, or driving licence), proof of address (utility bills, bank statements), and proof of ownership of payment methods used. This data is used solely for identity verification and fraud prevention purposes.

1.3 Financial Data

We collect information about your deposit and withdrawal transactions, including payment method details (bKash account number, Nagad number, Rocket number, Upay number, bank account details, or masked card numbers), transaction amounts in BDT (৳), and transaction dates and times. We do not store full card numbers on our servers; card data is tokenised and managed by our PCI-DSS compliant payment partners.

1.4 Gameplay and Betting Data

We record your activity on the tabaji platform, including games played, bets placed, wagering amounts, game outcomes, session durations, and bonus redemptions. This data is used to operate the platform, resolve disputes, detect fraud, and personalise your gaming experience.

1.5 Technical and Device Data

When you access tabaji, we automatically collect certain technical data, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and pages visited. This data helps us maintain platform security, optimise performance, and detect suspicious activity.

1.6 Communications Data

When you contact our support team or respond to our communications, we retain records of those interactions, including the content of messages, timestamps, and the resolution provided. This allows us to deliver consistent support and improve our service quality.

1.7 Cookies and Tracking Technologies

tabaji uses cookies, pixel tags, and similar tracking technologies to maintain your session, remember your preferences, and analyse platform usage patterns. You may manage cookie preferences through your browser settings. Please note that disabling essential cookies may affect the functionality of certain platform features.

tabaji processes your personal data on one or more of the following lawful bases: performance of a contract with you (operating your account), compliance with a legal obligation, our legitimate interests, or your consent where specifically requested. The primary purposes for which we use your data are set out below.

tabaji does not sell your personal data. We may share your information with carefully selected third parties only where it is necessary to deliver our services, meet legal obligations, or protect the security of the platform.

3.1 Payment Service Providers

We share relevant financial and identity data with our payment partners — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card networks Visa and Mastercard — solely to process your deposits and withdrawals. These partners are contractually bound to handle your data securely and only for the stated purpose.

3.2 Identity Verification and KYC Partners

We work with specialist third-party KYC and identity verification providers to validate the documents you submit. These providers access only the data necessary to perform identity checks and are prohibited from using that data for any other purpose.

3.3 Game Content Providers

Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session-level data (player identifier, stake amount, game round ID) for the purpose of game delivery and dispute resolution. These providers do not receive your full personal profile.

3.4 Fraud Prevention and Security Services

We may share technical data (IP address, device fingerprint, transaction patterns) with fraud prevention platforms to protect the tabaji community from fraudulent activity and money laundering.

3.5 Legal and Regulatory Authorities

We may disclose personal data to law enforcement agencies, regulators, or courts when required to do so by applicable law, a valid legal order, or to protect the rights and safety of tabaji, its players, or third parties.

3.6 Business Transfers

In the event that tabaji undergoes a merger, acquisition, or transfer of substantially all of its assets, your personal data may be transferred to the successor entity. We will notify you of any such transfer and the applicable privacy terms.

tabaji retains your personal data for as long as your account remains active and for a period thereafter as required by our legal obligations and legitimate business purposes. The general retention periods we apply are as follows:

• Account and registration data: Retained for the duration of the account and for a minimum of five (5) years following account closure, to meet anti-money-laundering record-keeping requirements.
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction.
• Gameplay and betting history: Retained for a minimum of two (2) years, or longer where required for dispute resolution or regulatory purposes.
• Customer support communications: Retained for a minimum of two (2) years from the date of the final interaction in a support thread.
• Marketing consent records: Retained for the duration of your account and for one (1) year following any withdrawal of consent.

When data is no longer required for any of the purposes set out above, it is securely deleted or anonymised in accordance with our internal data lifecycle procedures.

Protecting your personal data is a core priority at tabaji. We implement a layered security architecture that includes the following measures:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the tabaji platform
• AES-256 encryption for sensitive data stored on our servers, including identity documents and financial records
• Role-based access controls ensuring that only authorised personnel with a documented business need may access personal data
• Multi-factor authentication for internal systems used to access player data
• Regular penetration testing and security audits conducted by independent security specialists
• Automated fraud monitoring systems that operate continuously to detect anomalous account activity
• PCI-DSS compliant card data handling via tokenisation, ensuring full card numbers are never stored on tabaji servers

While tabaji takes all reasonable steps to protect your data, no system is entirely immune from security risks. In the event of a data breach that poses a significant risk to your rights, we will notify affected players and relevant authorities within the timeframes required by applicable law.

You also play an important role in protecting your account. Always use a strong, unique password for your tabaji account and never share your login credentials with anyone. tabaji staff will never ask for your password.

tabaji respects your rights over your personal data. Depending on applicable law, you may have the following rights with respect to the personal data we hold about you:

Right of Access

You may request a copy of the personal data tabaji holds about you, along with information about how it is used. We will provide this within 30 days of a verified request.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it. Certain corrections (such as changes to your legal name) may require supporting documentation.

Right to Erasure

In certain circumstances, you may request that we delete your personal data. This right is subject to limitations where retention is required by law (for example, anti-money-laundering record-keeping obligations) or where data is needed to resolve an outstanding dispute.

Right to Restrict Processing

You may ask us to restrict the processing of your personal data in specific situations, such as where you contest the accuracy of the data or object to our use of it for a particular purpose.

Right to Data Portability

Where processing is based on your consent or a contract, you may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.

Right to Object

You may object at any time to the processing of your personal data for direct marketing purposes. Once you exercise this right, we will cease processing your data for that purpose without delay. You may also object to processing based on our legitimate interests, and we will assess whether those interests override your rights in the specific circumstances.

How to Exercise Your Rights

To exercise any of the rights described above, please contact our Data Privacy team by email at [email protected]. Please include your registered username and a clear description of your request. We will verify your identity before processing any data rights request to prevent unauthorised access to your information.

7.1 What Are Cookies?

Cookies are small text files placed on your device by a website. They allow the website to remember information about your visit, such as your login status and preferences, and help the site function correctly across sessions.

7.2 Types of Cookies We Use

• Essential cookies: Required for the platform to function. These include session management cookies that keep you logged in while navigating the site. These cannot be disabled without breaking core functionality.
• Security cookies: Used to detect and prevent fraudulent login attempts, verify your identity across requests, and maintain platform integrity.
• Analytics cookies: Help us understand how players use the tabaji platform — which pages are visited most frequently, how long sessions last, and where users encounter difficulties. Data is aggregated and not linked to individual profiles.
• Preference cookies: Remember your selected language, game settings, and display preferences so you do not need to reconfigure them on each visit.

7.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Instructions for the most commonly used browsers are available via their respective help documentation. Please note that disabling essential or security cookies may prevent you from logging into your tabaji account or using certain platform features.

With your consent, tabaji may send you promotional communications about new games, bonus offers, VIP tier upgrades, seasonal promotions (such as Eid specials, Pohela Boishakh offers, and BPL cricket season promotions), and other platform news. These communications may be delivered by email or SMS to your registered contact details.

You may withdraw your consent and unsubscribe from marketing communications at any time by contacting our support team at [email protected] or by using the unsubscribe link included in any marketing email. Withdrawal of marketing consent will not affect your ability to use your tabaji account or receive essential transactional communications (such as deposit confirmations and withdrawal notifications).

tabaji does not share your contact details with unaffiliated third parties for their own marketing purposes.

The tabaji platform is strictly for individuals aged 21 years and above. We do not knowingly collect personal data from anyone under the age of 21. If we become aware that a minor has registered an account or provided personal data to tabaji, we will immediately close the account, delete the associated data, and refund any deposits in accordance with our standard procedures.

If you believe a minor has created a tabaji account, please notify us immediately at [email protected] so that we can investigate and take appropriate action without delay.

tabaji reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. When we make material changes, we will publish the updated policy on this page with a revised effective date and, where appropriate, notify registered players by email.

We encourage you to review this Privacy Policy periodically so that you remain informed about how tabaji protects your personal data. Your continued use of the tabaji platform following any update to this policy constitutes your acknowledgement of the revised terms.

All previous versions of this Privacy Policy are archived and available on request. For any questions about how changes may affect you, please contact [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way tabaji handles your personal data, please contact our Data Privacy team using the details below. We are committed to addressing all privacy-related enquiries thoroughly and within a reasonable timeframe.

Email: [email protected]

Response time: We aim to acknowledge all privacy enquiries within 48 hours and provide a full response within 30 days. VIP tier members receive priority handling.

For formal data rights requests (access, erasure, rectification, portability), please include your registered tabaji username and a description of your request in your email. We will verify your identity before proceeding to ensure your data is protected throughout the process.