tbeej Privacy Policy — How We Handle Your Data

1. Introduction

tbeej treats the protection of personal data as a core operational responsibility, not an afterthought. We collect only the data necessary to operate the platform safely and legally, to process payments in BDT through bKash, Nagad, and other local payment methods, to comply with anti-money laundering (AML) and Know Your Customer (KYC) obligations, and to provide effective customer support to players across all divisions of Bangladesh including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh.

This Privacy Policy is provided in English, which is the language of record for tbeej. A Bengali translation may be made available for informational purposes. In the event of any inconsistency between the English and Bengali versions of this policy, the English version takes precedence.

Privacy at a Glance

2. Information We Collect

tbeej collects personal data in two ways: information you provide directly to us when you register, verify your identity, or contact support; and information that is generated automatically by your use of the platform. The categories of data we collect are set out below.

tbeej does not collect sensitive personal data such as race, ethnicity, religion, political views, health records, or biometric data. We do not access your phone's contacts, gallery, microphone, or GPS location. Our data collection is limited to what is strictly necessary for the lawful operation of the platform.

3. How We Use Your Information

tbeej uses the personal data it collects for the following specific purposes. We do not use your data for any purpose beyond those listed below without first obtaining your explicit consent.

• To create and manage your tbeej account, including authentication, password reset, and account recovery processes.
• To process deposits and withdrawals in BDT through your chosen payment method (bKash, Nagad, Rocket, Upay, or bank transfer) and to maintain accurate financial records.
• To conduct KYC identity verification and meet our anti-money laundering (AML) obligations, as required by applicable law.
• To detect and prevent fraud, account takeover, bonus abuse, use of automated bots, and any other form of prohibited conduct on the platform.
• To provide customer support, respond to queries and complaints, and resolve disputes in relation to your tbeej account, transactions, or gaming activity.
• To monitor platform usage for responsible gaming purposes, including identifying players who may be showing signs of problem gambling, and to enable the operation of deposit limits, session time limits, cooling-off periods, and self-exclusion.
• To send transactional communications related to your account, such as deposit confirmations, withdrawal notifications, and security alerts. tbeej does not send unsolicited marketing emails without your prior consent.

tbeej does not use your personal data for automated profiling that has a legal or similarly significant effect on you, nor for targeted advertising campaigns on third-party platforms. Your data stays within tbeej's operational environment and is used only for the purposes stated above.

4. Legal Basis for Processing

tbeej processes your personal data on the following legal bases. Where more than one basis applies, all applicable bases are listed.

• Contractual necessity: Processing your registration data, financial transaction records, and gaming activity data is necessary to perform the contract we have with you (i.e. to provide you with tbeej's casino and betting services).
• Legal obligation: Processing for KYC verification, AML compliance, and record-keeping in response to regulatory requirements is necessary to comply with applicable legal obligations.
• Legitimate interests: Processing for fraud detection, security monitoring, platform performance analysis, and responsible gaming monitoring is carried out on the basis of tbeej's legitimate interest in operating a safe and fair platform.
• Consent: Where tbeej sends you optional marketing communications (such as promotional offers for BPL season or Eid bonuses), we will do so only with your prior explicit consent, which you may withdraw at any time by contacting [email protected].

5. Sharing Your Information

tbeej does not sell or rent your personal data to any third party. However, in order to operate the platform effectively and comply with our legal obligations, we share data with a limited set of trusted third parties in the following circumstances.

• Payment processing partners: We share transaction-relevant data with your chosen payment provider (bKash, Nagad, Rocket, Upay, or your bank) to process deposits and withdrawals. These providers operate under their own privacy policies and security standards.
• Game content providers: Game studios such as Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi may receive session and game-result data necessary to deliver the game and determine outcomes. These providers do not receive your full KYC profile.
• Legal and regulatory authorities: tbeej may disclose your personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, court order, or regulatory direction. tbeej will not disclose data beyond what is strictly required by the relevant legal obligation.
• Fraud prevention and security services: We may share limited technical data (such as IP addresses and device fingerprints) with specialist fraud detection and platform security providers to identify and block fraudulent activity.

All third parties with whom tbeej shares personal data are contractually obligated to handle that data securely, to use it only for the specific purpose for which it was shared, and to comply with applicable data protection standards. tbeej does not permit any third party to use your data for their own marketing purposes.

6. Payment Data and Financial Information

All financial transactions at tbeej are conducted in Bangladesh Taka (BDT). tbeej does not store complete mobile banking PINs, bKash wallet passwords, Nagad account passwords, or full bank account numbers on its own servers. Payment authentication is handled directly by the relevant payment provider on their own secure infrastructure. tbeej retains only the transaction reference, amount, timestamp, and payment method type for its own records.

If tbeej introduces card payment options in future (Visa or Mastercard), card data will be processed exclusively through a PCI-DSS compliant payment gateway. tbeej itself will not store full card numbers, CVV codes, or card expiry dates. This section will be updated accordingly if card payments are introduced.

7. Cookies and Tracking Technologies

tbeej uses cookies and similar browser-based tracking technologies to operate the platform, maintain your session, and analyse platform performance. We do not use third-party advertising cookies or cross-site tracking cookies. The types of cookies we use are described below.

• Essential session cookies: These are strictly necessary to keep you logged in during a platform session. Without these cookies, the platform cannot function. They are deleted when you close your browser.
• Security cookies: These cookies help tbeej identify and block suspicious login attempts, detect account sharing, and flag anomalous activity patterns consistent with fraud or bot use.
• Performance and analytics cookies: These cookies collect aggregated, anonymised data about how users navigate the tbeej platform — which pages are visited most, how long sessions last, and which features are used. This data is used internally to improve the platform experience.
• Preference cookies: These cookies remember your platform preferences, such as your chosen language setting (English or Bengali) and notification preferences, so that you do not have to reset them on every visit.

You can manage or delete cookies through your mobile browser's settings at any time. Please note that disabling essential session cookies will prevent you from logging in to your tbeej account. Disabling performance cookies will not affect your ability to use the platform.

8. Data Retention

tbeej retains your personal data for as long as your account remains active and for a minimum period after account closure as required by applicable law and regulatory guidance. The following retention periods apply as a general guide: account registration data is retained for the duration of the account plus a minimum of 5 years after closure; financial transaction records are retained for a minimum of 5 years from the date of the transaction, in compliance with AML record-keeping obligations; KYC verification documents are retained for a minimum of 5 years from the date of verification or the date of account closure, whichever is later; gaming activity data is retained for 2 years from the date of activity; technical and device data logs are retained for 12 months.

When the applicable retention period expires and there is no longer a legal or operational basis for retaining your data, tbeej will securely delete or anonymise your personal information. If you request erasure of your data before the end of the retention period, tbeej will assess the request against its legal obligations and inform you of the outcome within a reasonable timeframe.

9. Data Security

tbeej employs industry-standard technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Security measures in place include: SSL (TLS) encryption on all data in transit between your device and tbeej's servers; secure password hashing using modern cryptographic algorithms (plain-text passwords are never stored); two-factor authentication (2FA) options for account login; regular security audits and vulnerability assessments of the platform; access controls ensuring that tbeej staff can only access personal data where their role requires it; and secure, encrypted data storage infrastructure.

Despite these measures, no digital platform can guarantee absolute security against all possible threats. In the unlikely event of a data breach that affects your personal data, tbeej will notify affected users as soon as reasonably practicable and will take immediate steps to contain and mitigate the breach. tbeej will also report material data breaches to relevant authorities as required by applicable law.

10. Your Data Rights

As a tbeej user, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact [email protected] with your full name and registered mobile number so that we can verify your identity before processing the request.

• Right of access: You may request a copy of the personal data tbeej holds about you. We will provide this within a reasonable timeframe at no charge for standard requests.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or complete it.
• Right to erasure: You may request that tbeej delete your personal data. We will process erasure requests subject to our legal data retention obligations. Where legal obligations require us to retain certain data, we will inform you of the specific reason.
• Right to restrict processing: In certain circumstances, you may request that tbeej restrict the processing of your personal data — for example, while a rectification request is being assessed.
• Right to data portability: You may request that tbeej provide your personal data in a structured, commonly used, machine-readable format, where technically feasible.
• Right to withdraw consent: Where tbeej processes your data on the basis of your consent (e.g. for optional marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

tbeej will respond to all data rights requests within a reasonable timeframe. In most cases, we aim to respond within 30 days. For complex requests, this may be extended by a further 30 days, in which case we will inform you of the extension and the reason for it.

11. Children and Underage Users

The tbeej platform is strictly intended for adults aged 21 years and above. tbeej does not knowingly collect, store, or process personal data relating to individuals under the age of 21. Age verification is conducted at account registration and may be repeated at the point of withdrawal or at any other time tbeej deems appropriate.

If tbeej discovers that it has inadvertently collected personal data from a person under the age of 21, it will delete that data as soon as reasonably practicable and will close the associated account. If you are a parent or guardian and believe that a person under 21 in your care has registered a tbeej account, please contact [email protected] immediately.

12. Third-Party Links and Services

The tbeej platform does not contain links to external third-party websites. Game content on tbeej is delivered by licensed studios operating within the tbeej environment; players do not navigate away from tbeej to access game content. Payment processing is handled via in-platform integrations with bKash, Nagad, Rocket, and Upay; players do not leave the tbeej platform to complete transactions. tbeej bears no responsibility for the privacy practices of any external service or website that a user may independently access.

13. Changes to This Privacy Policy

tbeej may update this Privacy Policy from time to time to reflect changes in its data processing practices, applicable law, or platform functionality. When a material change is made, tbeej will post the updated policy on this page and update the effective date at the top of the document. Where the change is significant, tbeej will endeavour to notify registered users via the platform or by email.

Your continued use of the tbeej platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with a material change to this policy, you may request closure of your account by contacting [email protected].

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how tbeej handles your personal data, please contact our support team. We are available 24 hours a day, 7 days a week, including all Bangladesh public holidays.

Email: [email protected] (plain text — not a clickable link). We aim to respond to all privacy-related queries within 72 hours during Bangladesh Standard Time (BST, UTC+6) business hours, and within 30 days for formal data rights requests.