tabaja Privacy Policy

tabaja collects personal data through several channels: directly from you when you register an account or interact with our services, automatically through your use of the platform, and in limited circumstances from third-party service providers involved in the delivery of our services.

Information You Provide Directly

When you register a tabaja account or use our services, you provide us with the following categories of personal data:

Information Collected Automatically

When you visit or use the tabaja platform, certain technical and behavioural data is collected automatically through cookies, log files, and similar technologies:

• IP address and approximate geographic location (city/region level).
• Device type, operating system, and browser version.
• Pages visited, time spent on each page, and navigation path through the platform.
• Game session data, including games played, bet amounts, and session duration.
• Referral source (how you arrived at the tabaja platform).
• Login timestamps and frequency of platform access.

tabaja uses the personal data we collect for clearly defined purposes. We do not use your data for purposes that are incompatible with those stated at the time of collection. The primary purposes for which tabaja processes personal data are as follows:

Account Management & Service Delivery

Personal data is used to create and maintain your tabaja account, verify your identity and age, process deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and provide you with access to the full range of games and betting markets on the tabaja platform. Without this processing, we would be unable to provide you with tabaja's services.

Compliance & Legal Obligations

tabaja is required to process certain personal data in order to comply with applicable legal and regulatory obligations. This includes age verification to enforce the 18+ requirement, anti-money laundering (AML) monitoring, Know Your Customer (KYC) verification, and fraud detection. Where legally required, tabaja may be obligated to share data with regulatory authorities or law enforcement agencies.

Platform Security & Fraud Prevention

Technical and behavioural data collected during your use of the tabaja platform is used to detect and prevent fraudulent activity, identify duplicate accounts, monitor for suspicious betting patterns, and maintain the overall security and integrity of the platform. This processing is necessary to protect all tabaja players and the platform itself.

Customer Support

When you contact the tabaja support team via live chat, email, or WhatsApp, your communications and associated account data are processed to respond to your queries, resolve disputes, and improve the quality of our support services. Support communications may be retained for quality assurance and training purposes.

Marketing & Promotional Communications

With your consent, tabaja may use your contact data to send you information about promotions, bonuses, and seasonal offers relevant to your interests as a player on the tabaja platform. You may withdraw consent for marketing communications at any time by contacting our support team. Withdrawal of marketing consent does not affect the lawfulness of any processing that occurred prior to withdrawal.

tabaja does not sell, rent, or trade your personal data to third parties. However, in order to operate the tabaja platform and deliver services to you, we work with a number of trusted third-party service providers and, in certain circumstances, are required to disclose data to legal or regulatory authorities. All such data sharing is strictly controlled and limited to what is necessary for the specified purpose.

Service Providers

tabaja shares personal data with the following categories of service providers, each of whom is engaged under a contractual obligation to process data only on tabaja's instructions and to maintain appropriate security standards:

• Payment Processors: bKash, Nagad, Rocket, and Upay receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy frameworks and terms of service.
• Identity Verification Providers: Third-party KYC service providers may process your identity documents and verification data to confirm your identity and age on tabaja's behalf.
• Game Content Providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data necessary for game delivery, RNG certification, and platform integration. These providers do not receive your personally identifiable information for their own marketing use.
• IT Infrastructure & Hosting Providers: Providers of server infrastructure, content delivery networks (CDNs), and database management services may have access to platform data in the course of providing their services.
• Customer Support Tools: Providers of live chat and support ticketing software may process support communications on tabaja's behalf.
• Analytics Providers: Anonymised or aggregated platform usage data may be processed by analytics service providers to help tabaja understand how the platform is used and to improve its services.

Legal Disclosures

tabaja may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or regulatory direction. Such disclosures will be made in good faith and limited to what is strictly required by the relevant legal obligation.

tabaja uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse usage patterns, and improve the overall experience for our players. A cookie is a small text file placed on your device when you visit a website. Cookies do not contain executable code and cannot access other files on your device.

Types of Cookies Used by tabaja

Managing Your Cookie Preferences

You can manage or disable non-essential cookies at any time through your web browser's settings. Most modern browsers allow you to block all cookies, block third-party cookies only, or delete cookies that have already been set. Please note that disabling essential cookies will prevent you from logging into your tabaja account and using core platform features. Instructions for managing cookies are available in the help documentation of your browser.

tabaja retains your personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable legal, regulatory, accounting, or reporting obligations. The retention periods applied to different categories of data are set out below.

Retention Periods by Data Category

• Account and Identity Data: Retained for the duration of your active account relationship with tabaja, plus a minimum of five years following account closure, to comply with anti-money laundering and KYC regulatory requirements.
• Transaction and Financial Data: Retained for a minimum of five years from the date of each transaction to comply with financial record-keeping obligations.
• Support Communications: Retained for up to three years from the date of the communication for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained for the duration of your account and for one year following withdrawal of consent, to demonstrate compliance with your stated preferences.
• Technical and Usage Data (Logs): Typically retained for up to 12 months, after which they are aggregated or deleted.
• Cookie Data: Session cookies expire when you close your browser. Persistent cookies have varying expiry periods, typically between 30 days and 12 months, depending on their function.

Where retention beyond these periods is required by a specific legal obligation, tabaja will retain the relevant data for the duration of that obligation and no longer. Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

As a player on the tabaja platform, you have a number of rights in relation to your personal data. tabaja is committed to honouring these rights in a timely and transparent manner. To exercise any of the rights described below, please contact the tabaja support team via live chat or email at support@tabaja.net.

Right of Access

You have the right to request a copy of the personal data that tabaja holds about you. Upon receipt of a valid request, tabaja will provide you with a summary of the personal data held, the purposes for which it is processed, and the categories of third parties with whom it has been shared. tabaja aims to respond to access requests within 30 days.

Right to Rectification

If any personal data held by tabaja about you is inaccurate, incomplete, or out of date, you have the right to request that it be corrected. For straightforward corrections such as updating a phone number or email address, please contact the support team directly. For corrections to identity documents or date of birth, tabaja may require supporting documentation before making amendments.

Right to Erasure

In certain circumstances, you have the right to request that tabaja delete your personal data. This right applies where the data is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and no other lawful basis for processing exists, or where the data has been unlawfully processed. tabaja will assess erasure requests on a case-by-case basis. Where legal retention obligations require tabaja to retain certain data, full erasure may not be possible, and tabaja will explain the specific reason for any limitation on this right.

Right to Restrict Processing

You may request that tabaja restrict the processing of your personal data in limited circumstances, such as while the accuracy of data is being contested or while an objection to processing is being assessed.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of tabaja's legitimate interests, though such objections will be assessed against tabaja's legitimate business needs and legal obligations.

tabaja takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect your information against unauthorised access, loss, destruction, or disclosure. These measures are reviewed and updated on an ongoing basis to reflect evolving security standards and the nature of the data we process.

Technical Security Measures

• SSL/TLS Encryption: All data transmitted between your device and the tabaja platform is encrypted using SSL/TLS technology, ensuring that your personal and financial information cannot be intercepted in transit.
• Password Hashing: Account passwords are stored using industry-standard one-way cryptographic hashing. tabaja never stores passwords in plain text and cannot retrieve your password — only reset it.
• Two-Factor Authentication (2FA): tabaja supports OTP-based verification during login and for sensitive account actions, adding an additional layer of security beyond your password.
• Access Controls: Access to personal data within tabaja's systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and audited.
• Intrusion Detection: tabaja's infrastructure is monitored continuously for suspicious activity, unauthorised access attempts, and potential security incidents.

Your Responsibilities

While tabaja takes robust measures to secure the tabaja platform, the security of your account also depends on the steps you take to protect your own credentials. You are responsible for keeping your tabaja username and password confidential and for ensuring that you log out of your account when using a shared or public device. tabaja will never ask you to provide your password through any channel. If you receive any communication purporting to be from tabaja and requesting your password, treat it as fraudulent and contact our support team immediately.

Data Breach Response

In the event of a personal data breach that poses a risk to affected players, tabaja will take prompt action to contain the breach, assess its scope and impact, and notify affected users in accordance with applicable data breach notification obligations. tabaja maintains an incident response plan specifically for data security events.

tabaja reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. Where material changes are made to this policy, tabaja will provide notice through the platform or by email to your registered address prior to the changes taking effect. The effective date at the top of this page will be updated to reflect the date of the most recent revision.

We encourage you to review this Privacy Policy periodically to stay informed about how tabaja protects and uses your personal data. Continued use of the tabaja platform after any update to this policy constitutes your acceptance of the revised terms.

Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way tabaja handles your personal data, please contact our support team through any of the following channels:

• Email: support@tabaja.net — plain text only, not a clickable link.
• Live Chat: Available 24/7 directly on the tabaja platform.
• WhatsApp: +880 1700 000000 — for general enquiries only. Do not share sensitive personal data via WhatsApp.
• Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6).

tabaja aims to respond to all privacy-related enquiries within five business days. Complex requests — such as subject access requests or erasure requests — may take up to 30 days to fully process, during which time tabaja will keep you informed of progress.