Privacy Policy

1.1 Information You Provide Directly

When you register an account or interact with the Platform, you provide us with personal information that we need to deliver our services. This includes:

• Full legal name and date of birth (to verify you are 21 years of age or older).
• Email address and mobile phone number for account communications.
• Residential address, city (e.g., Dhaka, Chittagong, Sylhet, Khulna), and country of residence.
• Payment method details — including bKash, Nagad, Rocket, or Upay account numbers — sufficient to process deposits and withdrawals.
• Government-issued identity documentation (National ID, passport, or driving licence) provided during KYC verification.
• Any correspondence you send to our support team at [email protected].

1.2 Information Collected Automatically

When you access the Platform, our systems automatically collect certain technical data including:

• IP address and approximate geographic location derived from your IP.
• Device type, operating system, and browser version.
• Session timestamps, pages visited, and in-Platform navigation paths.
• Betting and gaming activity — markets accessed, bet amounts, wager outcomes, and session duration.
• Cookies and similar tracking technologies (see Section 6 for full cookie details).

1.3 Information from Third Parties

We may receive supplementary information about you from third-party sources to support identity verification, fraud prevention, and responsible gaming obligations. These sources may include payment service providers (e.g., bKash, Nagad), identity verification agencies, and fraud-detection service providers. We process such third-party data only where we have a legitimate interest or legal basis to do so.

2.1 Service Delivery

The primary purpose for which tkbaje processes your personal data is to provide the Platform's core services. This includes creating and managing your account, processing deposits and withdrawals in Bangladeshi Taka (BDT), delivering sports betting markets and casino game access, and providing customer support.

2.2 Legal and Regulatory Compliance

We are required to process certain personal data to comply with applicable legal obligations. This includes age verification (confirming users are 21+), anti-money laundering (AML) checks, know-your-customer (KYC) procedures, and responding to lawful requests from competent authorities. Compliance-related processing is mandatory; you cannot opt out of it while maintaining an active account.

2.3 Fraud Prevention and Security

tkbaje processes account activity data, device fingerprints, and IP information to detect and prevent fraud, money laundering, bonus abuse, collusion, and other prohibited conduct. This processing is necessary to protect both the Platform and the interests of legitimate players.

2.4 Responsible Gaming

We monitor wagering patterns and session data to identify players who may be exhibiting signs of problem gambling. Where such patterns are identified, we may proactively reach out to offer responsible gaming tools or restrictions. This processing is carried out in your vital interest and in the public interest.

2.5 Marketing Communications

With your explicit consent, we may send you promotional communications about tkbaje offers, new games, BPL and IPL betting promotions, and seasonal campaigns (e.g., Eid, Pohela Boishakh). You may withdraw your consent to marketing communications at any time by contacting [email protected]. Withdrawal of marketing consent does not affect service-related communications, which are sent regardless of marketing preferences.

2.6 Platform Improvement

We use aggregated and anonymised usage data to analyse Platform performance, improve user experience, develop new features, and optimise our sports betting and casino product offerings. This analysis does not identify you personally and is used solely to make the Platform better for all users.

3.1 Service Providers

We share personal data with carefully selected third-party service providers who assist us in operating the Platform. These include payment processors (bKash, Nagad, Rocket, Upay, and banking partners), identity verification vendors, game technology suppliers (such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi), IT infrastructure providers, and customer support platforms. All service providers are contractually bound to process your data only on our instructions and to maintain appropriate security standards.

3.2 Legal Obligations

tkbaje may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by applicable law, a court order, or other lawful authority. We will endeavour to notify you of such disclosures where we are legally permitted to do so.

3.3 Business Transfers

In the event that tkbaje undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, your personal data may be transferred to the relevant successor entity as part of that transaction. We will provide notice of any such transfer and the privacy practices of the receiving entity before the transfer takes effect.

4.1 Retention Periods

tkbaje retains personal data for as long as your account is active and for a period thereafter as required to comply with our legal, regulatory, and contractual obligations. As a general guide:

• Account registration data and KYC documents: retained for a minimum of five (5) years following account closure.
• Transaction and betting records: retained for a minimum of five (5) years in accordance with financial record-keeping requirements.
• Customer support correspondence: retained for two (2) years from the date of the last interaction.
• Marketing consent records: retained for the duration of your consent and for one (1) year thereafter as evidence of consent.
• Technical logs and session data: typically retained for ninety (90) days unless required longer for an ongoing investigation.

4.2 Deletion on Request

You may request deletion of your personal data by contacting [email protected]. We will action deletion requests within thirty (30) days where there is no overriding legal requirement to retain the data. Please note that certain data — particularly transaction records and KYC documents — must be retained for the legally mandated periods described above and cannot be deleted on request during those retention windows.

5.1 Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide this information in a structured, commonly used format within thirty (30) days of receiving a valid request.

5.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You may update certain account details directly from within your account settings. For changes that cannot be self-served (such as name corrections backed by legal documentation), please contact [email protected].

5.3 Right to Restriction and Objection

You have the right to request that we restrict processing of your personal data in certain circumstances — for example, while a rectification request is pending, or where you contest the lawfulness of our processing. You may also object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming purposes, where you have grounds relating to your particular situation.

5.4 Right to Withdraw Consent

Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw consent, contact [email protected] with the subject line "Withdraw Marketing Consent".

6.1 What Are Cookies?

Cookies are small text files placed on your device when you visit the Platform. They allow us to recognise your device across sessions, remember your preferences, and analyse how you use the Platform. Some cookies are essential for the Platform to function correctly; others are used for analytics or personalisation.

6.2 Types of Cookies We Use

• Essential cookies: Required for core Platform functionality including login sessions, account security tokens, and bet placement. These cannot be disabled without impairing your ability to use the Platform.
• Analytics cookies: Used to understand how users navigate the Platform, which pages are most visited, and where improvements can be made. Data is aggregated and anonymised.
• Preference cookies: Remember your settings such as language preference, odds format, and notification preferences across sessions.
• Security cookies: Support fraud detection and anti-bot measures by tracking unusual access patterns and device characteristics.

6.3 Managing Cookies

You may control cookies through your browser settings. Most modern browsers allow you to block or delete cookies, though doing so may impact the functionality of the Platform. Disabling essential cookies will prevent you from logging in and using real-money betting features. For analytics and preference cookies, disabling them has no impact on core Platform access.

7.1 Technical Safeguards

tkbaje employs industry-standard security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include 256-bit SSL/TLS encryption for all data in transit, encrypted storage for sensitive data at rest, access controls limiting staff access to personal data on a need-to-know basis, and regular security audits of Platform infrastructure.

7.2 Your Responsibilities

While we take extensive measures to protect your data, you are also responsible for maintaining the security of your account. You must use a strong, unique password for your tkbaje account, never share your login credentials with any other person, log out of your account after each session on shared devices, and notify us immediately at [email protected] if you suspect your account has been compromised.

7.3 Incident Response

In the event of a data security breach that poses a risk to your rights and freedoms, tkbaje will notify affected users without undue delay and within 72 hours of becoming aware of the breach where feasible. Notifications will describe the nature of the incident, the categories of data affected, the likely consequences, and the measures tkbaje is taking to address it.

8.1 Amendments

tkbaje reserves the right to update this Privacy Policy at any time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered users by email or via an in-Platform notification. Your continued use of the Platform following any update constitutes acceptance of the revised Policy. We encourage you to review this page periodically to stay informed about how we protect your personal information.

8.2 Contact and Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or our data-handling practices, please contact our support team. Our contact email address is displayed in plain text in the footer of this page. We aim to respond to all privacy-related queries within five (5) business days during Bangladesh Standard Time (BST, UTC+6) working hours.