tabaji Privacy Policy

1. Introduction

This Privacy Policy describes how tabaji ("tabaji", "we", "us", or "our"), operating the online casino and sports betting platform accessible at tabaji.vip, collects, uses, stores, shares, and protects the personal data of its registered players and website visitors ("you" or "your").

tabaji is committed to handling your personal data with care, transparency, and in accordance with applicable data protection principles. By accessing or using the tabaji platform — whether by visiting the website, creating an account, making a deposit, or placing a bet — you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy should be read alongside tabaji's Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference. If you disagree with any part of this policy, you should discontinue use of the tabaji platform.

2. Data Controller

For the purposes of this Privacy Policy, tabaji acts as the data controller with respect to the personal data of its registered players and website visitors. As data controller, tabaji determines the purposes for which and the means by which personal data is processed.

All data-related enquiries, access requests, correction requests, and deletion requests should be directed to the tabaji data team via email at [email protected]. Please include "Data Privacy Request" in your subject line to ensure your enquiry is routed to the appropriate team member.

3. Data We Collect

tabaji collects the following categories of personal data in connection with the operation of the platform and the provision of its services:

3.1 Identity Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify that you meet the minimum age requirement of 18 years).
• Gender (where provided voluntarily at registration).
• Copies of identity documents submitted during KYC verification, such as your National ID Card, passport, or driving licence.

3.2 Contact Data

• Mobile phone number registered to your tabaji account.
• Email address associated with your account.
• Residential address (where provided for KYC purposes).

3.3 Financial Data

• Details of the payment methods linked to your account, including the registered mobile number for bKash, Nagad, Rocket, or Upay accounts, or bank account details for bank transfer methods.
• Transaction records including deposit amounts, withdrawal amounts, dates, and processing statuses — all denominated in Bangladeshi Taka (BDT).
• Bonus claim history and wagering activity records.

3.4 Technical Data

• IP address at the time of registration and subsequent logins.
• Device type, operating system version, and browser type.
• Session timestamps and login history.
• Geolocation data derived from IP address (country and city level — not precise GPS location).

3.5 Usage Data

• Games played, bet amounts, game outcomes, and session duration.
• Pages visited within the tabaji platform and navigation patterns.
• Features accessed, such as the responsible gaming tools dashboard or the bonus promotions page.

3.6 Communications Data

• Records of communications between you and the tabaji support team, including live chat transcripts, email correspondence, and support ticket history.
• Marketing preferences and consent records.

4. How We Collect Data

tabaji collects personal data through the following means:

• Direct submission: Data you provide directly when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or opting in to a promotion .
• Automated collection: Data collected automatically when you access the tabaji platform, including IP address, device information, session data, and browsing behaviour within the site, primarily via cookies and server logs.
• Third-party sources: Data received from third-party identity verification and KYC service providers when you submit documents for account verification. tabaji may cross-reference information you provide against these external sources to confirm accuracy.
• Payment processors: Transaction status and confirmation data received from payment service providers including bKash, Nagad, Rocket, Upay, and banking partners when you initiate a deposit or withdrawal.

5. How We Use Your Data

tabaji uses the personal data it holds for the following purposes:

5.1 Account Management

To create, operate, and maintain your tabaji account, verify your identity and age, process your login requests, and manage your account settings and preferences.

5.2 Payment Processing

To process deposits and withdrawals in Bangladeshi Taka via your chosen payment method, to verify that deposits originate from payment accounts registered in your name, and to maintain accurate transaction records for accounting and dispute resolution purposes.

5.3 Legal and Regulatory Compliance

To fulfil tabaji's obligations under applicable law, including age verification, anti-money laundering (AML) checks, fraud prevention, and the maintenance of records required for audit or regulatory review. tabaji may be required to disclose certain data to law enforcement or regulatory authorities upon receipt of a lawful request.

5.4 Platform Security

To detect, investigate, and prevent fraudulent activity, account takeover attempts, bonus abuse, multi-accounting, and other security threats to the tabaji platform and its players. Technical data including IP addresses and device fingerprints play a key role in this function.

5.5 Customer Support

To respond to your enquiries, process complaints, manage disputes, and provide assistance via live chat or email. Support communications are retained to ensure continuity of service and for quality assurance purposes.

5.6 Responsible Gaming

To monitor gameplay patterns for indicators of problem gambling, to administer self-exclusion and deposit limit requests, and to ensure that players who have opted for cooling-off or self-exclusion are not able to circumvent those restrictions by accessing the platform through a new session or device.

5.7 Service Improvement

To analyse aggregated, anonymised usage data to understand how players interact with the tabaji platform, identify popular games and features, diagnose technical issues, and inform decisions about platform development and improvement. No individual player is identified in this analysis.

5.8 Marketing Communications

To send you promotional offers, bonus notifications, and platform updates by email or SMS, where you have provided explicit consent to receive such communications. You may withdraw marketing consent at any time by contacting [email protected] or by following the unsubscribe instruction in any marketing message.

6. Legal Basis for Processing

tabaji processes your personal data on the following legal bases:

• Contract performance: Processing that is necessary to create and operate your account, process payments, and deliver the services you have requested under the tabaji Terms & Conditions.
• Legal obligation: Processing required to comply with applicable legal requirements, including age verification, anti-money laundering obligations, fraud prevention, and record-keeping mandates.
• Legitimate interests: Processing carried out in pursuit of tabaji's legitimate business interests, such as platform security, fraud detection, and service improvement, where those interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications, certain cookies, and any other purpose for which tabaji has obtained your explicit prior consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7. Sharing Your Data

tabaji does not sell or trade your personal data. We share your data only in the following limited circumstances:

7.1 Payment Service Providers

To process deposits and withdrawals, tabaji shares necessary transaction data with payment service providers including bKash, Nagad, Rocket, Upay, and the relevant banking institutions. These providers receive only the data required to complete the specific transaction and are bound by their own data protection obligations.

7.2 Identity Verification Providers

To carry out KYC and age verification, tabaji may share identity document data with third-party verification service providers. These providers are contractually prohibited from using your data for any purpose other than the specific verification service commissioned by tabaji.

7.3 Game Software Providers

Certain game providers such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe may receive limited player session data — typically a pseudonymous player identifier, game round data, and bet history — for the purpose of delivering game content and resolving game-related disputes. These providers do not receive your full identity or payment data.

7.4 Legal and Regulatory Authorities

tabaji may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, a court order, or a lawful regulatory request. In such cases, tabaji will disclose only the minimum data necessary to satisfy the legal requirement.

7.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of the tabaji business, personal data held by tabaji may be transferred to the acquiring entity as part of that transaction. tabaji will provide reasonable notice to affected players in such an event and will ensure that the receiving entity is bound by data protection obligations no less protective than those set out in this policy.

8. Cookies and Tracking

tabaji uses cookies and similar tracking technologies on the tabaji.vip platform to support the operation and improvement of the site. The types of cookies used are as follows:

8.1 Strictly Necessary Cookies

These cookies are essential for the tabaji platform to function and cannot be disabled. They include session authentication cookies that keep you logged in during your visit, security cookies that protect against cross-site request forgery, and preference cookies that retain your account display settings. No consent is required for strictly necessary cookies.

8.2 Analytics Cookies

With your consent, tabaji uses analytics cookies to collect aggregated, anonymised data about how visitors interact with the platform — such as which pages are visited most frequently and where technical errors occur. This data is used to improve platform performance and user experience. No individual player is identified through analytics data.

8.3 Marketing Cookies

With your consent, tabaji may use cookies to track whether you arrived at the platform via a specific promotion or referral link, in order to apply any applicable welcome bonus correctly. tabaji does not use third-party advertising cookies or retargeting pixels that track your activity across other websites.

8.4 Managing Cookies

You may manage your cookie preferences at any time through your browser's built-in settings. Please note that disabling strictly necessary cookies may impair the functionality of the tabaji platform, including the ability to log in or maintain an active session. Withdrawing consent for analytics or marketing cookies will not affect your ability to use the core services.

9. Data Security

tabaji employs a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• SSL/TLS encryption on all connections between your device and the tabaji platform.
• Encryption of sensitive data fields — including password hashes and payment method identifiers — at rest in tabaji's databases.
• Access controls that restrict internal access to personal data on a strict need-to-know basis. tabaji staff do not have access to your full payment method credentials.
• Regular security assessments and penetration testing of the tabaji platform infrastructure.
• Two-factor authentication availability for player accounts, strongly recommended for all registered players.
• Monitoring systems that detect and alert on unusual account activity, including login attempts from unrecognised devices or locations.

While tabaji takes all reasonable steps to protect your personal data, no system is completely immune from security risk. In the event of a data breach that affects your personal data and is likely to result in a risk to your rights, tabaji will notify affected players without undue delay and will take immediate remedial action.

Players are also responsible for maintaining the security of their own account credentials. You should use a strong, unique password for your tabaji account and never share your login details with any other person. If you suspect your account has been compromised, contact [email protected] immediately.

10. Data Retention

tabaji retains personal data for as long as is necessary to fulfil the purpose for which it was collected, unless a longer retention period is required by applicable law. The following general retention periods apply:

• Account data: Retained for the duration of your active account and for a period of up to five years following permanent account closure, to satisfy legal record-keeping obligations and to resolve any outstanding disputes.
• Transaction records: Financial transaction data is retained for a minimum of five years from the date of the transaction in accordance with anti-money laundering and financial record-keeping requirements.
• KYC and identity documents: Retained for the duration of your account and for up to five years following closure, or longer where required by applicable law.
• Support communications: Customer support correspondence is retained for a period of three years from the date of the last interaction.
• Marketing consent records: Records of your marketing preferences and consent history are retained for the duration of your account and for one year following closure.
• Anonymised analytics data: Aggregated, anonymised usage data from which no individual can be identified may be retained indefinitely for platform improvement purposes.

When personal data is no longer required, tabaji will delete it securely or anonymise it in such a way that it can no longer be linked to an identifiable individual.

11. Your Rights

As a player whose personal data is processed by tabaji, you hold the following rights with respect to your data:

11.1 Right of Access

You have the right to request a copy of the personal data tabaji holds about you. Upon receipt of a verified access request, tabaji will provide a summary of the data held within a reasonable timeframe.

11.2 Right to Rectification

You have the right to request that tabaji corrects any personal data that is inaccurate or incomplete. Certain data corrections may require re-verification of your identity.

11.3 Right to Erasure

You have the right to request deletion of your personal data in circumstances where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the data has been unlawfully processed. Please note that tabaji may be required by law to retain certain data even following a deletion request — in such cases, tabaji will explain the basis for continued retention.

11.4 Right to Restrict Processing

You have the right to request that tabaji restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.

11.5 Right to Object

You have the right to object to processing carried out on the basis of legitimate interests, including profiling. You also have the right to object at any time to processing for direct marketing purposes.

11.6 Right to Withdraw Consent

Where tabaji processes your data on the basis of consent — for example, for marketing communications — you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

11.7 Exercising Your Rights

To exercise any of the rights described above, please send a written request to [email protected] with the subject line "Data Rights Request — [your account username]". tabaji will acknowledge your request within 5 business days and will respond substantively within 30 days. Where a request is complex or involves a large volume of data, tabaji may extend this period by a further 30 days with prior notice.

12. Children's Privacy

The tabaji platform is strictly intended for adults aged 18 years and above. tabaji does not knowingly collect personal data from any person under the age of 18. If tabaji becomes aware that personal data has been collected from a minor — whether at registration or subsequently through KYC review — that account will be immediately closed, all associated data will be deleted, and any deposited funds will be returned to the originating payment method.

Parents and guardians who believe that a minor may have registered a tabaji account or accessed the platform are encouraged to contact [email protected] immediately. tabaji takes underage gambling extremely seriously and will act swiftly upon any such notification.

13. Changes to This Policy

tabaji reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, platform operations, or data processing practices. Where changes are material — for example, a new category of data being collected or a new purpose for processing — tabaji will notify registered players by email or via an in-platform notification at least 7 days before the changes take effect.

For non-material clarifications or corrections, the revised policy will be published at tabaji.vip/privacy-policy without separate notice. The "Effective Date" at the top of the document will be updated accordingly. Continued use of the tabaji platform following the effective date of an updated policy constitutes acceptance of the revised terms.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way tabaji handles your personal data, please reach out using the contact details below. All privacy-related communications are handled by tabaji's dedicated data team.

• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request" as appropriate.
• Live Chat: Available within your tabaji account dashboard after login, available 24 hours a day, 7 days a week.
• Response Time: tabaji aims to acknowledge all privacy-related enquiries within 24 hours (Bangladesh Standard Time, UTC+6) and to provide a full response within 30 days.