tbeej Privacy Policy — Your Data, Your Rights

01 Introduction

Welcome to the tbeej Privacy Policy. tbeej ("tbeej", "we", "us", "our") operates the online betting and gaming platform accessible at https://tbeej.io, serving players across Bangladesh with cricket betting, live casino, slots, and sports wagering in Bangladeshi Taka (৳). This Privacy Policy describes how tbeej collects, uses, stores, shares, and protects the personal data of registered players, website visitors, and prospective users.

We take your privacy seriously. tbeej is built on a foundation of transparency, and we are committed to handling your personal information with care, discretion, and in accordance with accepted data protection principles. By accessing tbeej.io or registering a player account, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

This Privacy Policy should be read alongside the tbeej Terms & Conditions, which govern your use of the platform and incorporate this Policy by reference. Defined terms used in this Policy carry the same meaning as in the Terms & Conditions unless specified otherwise.

02 Data Controller

tbeej is the data controller in respect of all personal data collected from users of tbeej.io. As data controller, tbeej determines the purposes and means by which your personal data is processed. All data protection queries, subject access requests, and privacy-related concerns should be directed to the tbeej support team at [email protected] with the subject line "Privacy — Data Request".

tbeej operates as a safe and reliable platform with SSL-encrypted connections across all sessions. We employ industry-standard technical and organisational measures to protect your personal information from unauthorised access, loss, or disclosure.

03 Personal Data We Collect

tbeej collects personal data in a number of categories, depending on how you interact with the platform. The table below summarises the main categories of data we collect and the context in which they arise.

tbeej does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data (beyond responsible gaming disclosures you proactively provide), or biometric data for identification purposes.

04 How We Collect Your Data

tbeej collects personal data through the following channels:

• Direct provision: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or opting into a promotional offer.
• Automated collection: Technical and usage data collected automatically as you navigate tbeej.io, including through cookies, web beacons, and server log files. See Section 9 (Cookies) for further detail.
• Payment processors: Confirmation data received from bKash, Nagad, Rocket, Upay, Visa, and Mastercard when you initiate a financial transaction. tbeej does not store full card numbers or mobile wallet PINs.
• Game providers: Aggregated game-round outcome and wagering data relayed from certified game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to maintain accurate account balances and resolve disputes.
• Third-party identity verification services: Where tbeej employs a third-party KYC service provider to assist in verifying your identity documents, that provider may return a verified status flag to tbeej. We do not receive raw document scans from third-party KYC processors unless you upload them directly to tbeej.
• Publicly available sources: In limited fraud-prevention or AML (Anti-Money Laundering) review contexts, tbeej may cross-reference information against publicly available records or sanctions lists.

05 Purposes of Processing

tbeej processes your personal data only for specified, explicit, and legitimate purposes. We do not use your data for any purpose incompatible with those stated below.

• Account management: Creating, maintaining, and securing your tbeej player account, including authentication and session management.
• Service delivery: Processing bets and casino game rounds, calculating winnings, crediting and debiting your BDT account balance.
• Financial transactions: Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and card networks; maintaining transaction records; preventing duplicate or fraudulent payments.
• KYC and compliance: Verifying your identity and age (21+) as required by our responsible gaming commitments and internal risk policies.
• Fraud prevention and security: Detecting and preventing money laundering, account takeover, bot activity, bonus abuse, and other prohibited conduct described in our Terms & Conditions.
• Responsible gaming: Monitoring account activity to identify signs of problem gambling; administering deposit limits, cooling-off periods, and self-exclusion tools at your request.
• Customer support: Responding to your queries, complaints, and dispute submissions received via [email protected].
• Platform improvement: Analysing aggregated, anonymised usage data to improve platform performance, game selection, and user experience.
• Marketing communications: Sending you promotional offers, bonus alerts, and seasonal campaign messages — only where you have opted in and not subsequently opted out. You may withdraw marketing consent at any time via your account settings or by emailing [email protected].
• Legal obligations: Retaining records as required by applicable law, responding to lawful requests from competent authorities, and asserting or defending legal claims.

06 Legal Basis for Processing

tbeej processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and tbeej (i.e., the Terms & Conditions you accept at registration), including account creation, bet processing, and payment transactions.
• Legitimate interests: Processing necessary for tbeej's legitimate interests, where those interests are not overridden by your rights — including fraud detection, platform security, bonus abuse prevention, and service analytics.
• Legal obligation: Processing required to comply with applicable law, including identity verification, AML record-keeping, and responding to lawful authority requests.
• Consent: Processing based on your freely given, specific, and informed consent — principally for marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

07 Data Retention

tbeej retains your personal data for as long as is necessary to fulfil the purposes described in this Policy and to comply with our legal obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your account's active status plus a period of five (5) years following permanent account closure, to satisfy record-keeping obligations and to handle any late-arising legal claims.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of verification or from the date of account closure, whichever is later.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Support and communication records: Retained for three (3) years from the date of the last communication, unless the communication forms part of an active dispute or legal proceeding.
• Technical and log data: Retained for up to twelve (12) months from collection, after which it is anonymised or deleted.
• Marketing preference records: Retained for the duration of your account plus one (1) year following closure, to demonstrate consent and honour opt-out requests.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised so that it can no longer be linked to you as an individual.

08 Sharing Your Personal Data

tbeej does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the following limited and controlled circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and their technical intermediaries receive transaction data strictly necessary to process your deposits and withdrawals. These parties process your data as independent controllers under their own privacy policies.
• Game providers: Certified game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) receive a pseudonymous player identifier and session token to deliver game content and return round results. They do not receive your full name, NID, or financial details.
• KYC verification partners: Where tbeej uses a third-party identity verification service, your identity document data and verification status are shared with that provider solely for the purpose of completing KYC. The provider is contractually bound to process this data only as directed by tbeej.
• Technology and hosting providers: Cloud infrastructure, database hosting, and cybersecurity service providers who process data on our behalf under strict data processing agreements and are prohibited from using your data for any other purpose.
• Legal and regulatory authorities: Where required by applicable law, court order, or lawful request from a competent authority, tbeej will disclose personal data to the extent strictly necessary to comply with that obligation.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of tbeej's assets, your personal data may be transferred to the acquiring entity, which will be required to honour this Privacy Policy or provide you with notice and equivalent protections.

09 Cookies and Tracking Technologies

tbeej uses cookies and similar tracking technologies (web beacons, pixel tags, local storage) on tbeej.io. Cookies are small text files stored on your device that help us deliver a reliable, personalised, and secure browsing experience.

• Strictly necessary cookies: These are essential for the platform to function. They maintain your login session, remember your preferences within a single session, and enable secure payment flow. These cookies cannot be disabled without impairing platform functionality.
• Performance and analytics cookies: These collect anonymised data about how visitors use tbeej.io — which pages are visited most frequently, how long sessions last, and where errors occur. This data is used solely to improve platform performance. These cookies are activated only with your consent.
• Functional cookies: These remember your preferences across sessions — such as your preferred language setting (English) and notification preferences. Activated only with your consent.
• Marketing cookies: These track your activity across sessions to allow tbeej to deliver relevant promotional messages. Activated only where you have opted in to marketing communications. tbeej does not use third-party advertising networks or retargeting platforms that place cross-site tracking cookies.

You may manage your cookie preferences at any time through your browser settings. Most modern browsers allow you to refuse or delete cookies. Please note that disabling strictly necessary cookies will prevent you from logging in and using core platform features.

10 Security Measures

tbeej employs a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure:

• 256-bit SSL/TLS encryption: All data transmitted between your browser or device and tbeej.io is encrypted using 256-bit SSL/TLS. Look for the padlock icon in your browser's address bar when visiting tbeej.io.
• Encrypted data storage: Sensitive personal data — including KYC documents, financial identifiers, and account credentials — is stored using industry-standard encryption at rest.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. tbeej staff members are granted only the minimum level of data access required to perform their role. All access is logged and audited.
• Password hashing: Account passwords are stored as one-way cryptographic hashes. tbeej staff cannot view your plaintext password under any circumstances. tbeej will never ask you for your password via email or live chat.
• Two-factor authentication (2FA): All tbeej player accounts have access to 2FA as an additional login security layer. We strongly encourage all players to enable 2FA in their account settings.
• Fraud and anomaly detection: Automated systems monitor for unusual login patterns, suspicious transaction activity, and potential account compromise. Suspected security events trigger immediate protective measures including temporary account suspension and email notification.

11 Your Data Protection Rights

As a tbeej player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy — Data Request" and we will respond within a reasonable timeframe.

• Right of access: You may request a copy of all personal data tbeej holds about you, together with information about how it is processed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For account details such as your registered name or mobile number, you can update most information directly in your account settings.
• Right to erasure ("right to be forgotten"): You may request that tbeej delete your personal data. This right applies in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. It does not apply where retention is required for compliance with our legal obligations (e.g., AML record-keeping).
• Right to restrict processing: You may request that tbeej temporarily stop processing your personal data — for example, while the accuracy of the data is being verified following a rectification request.
• Right to data portability: You may request a machine-readable copy of the personal data you have provided to tbeej, in a structured and commonly used format.
• Right to object: You may object to tbeej processing your personal data on the basis of legitimate interests, including for direct marketing purposes. Where you object to marketing, we will stop immediately. Where you object on other legitimate-interest grounds, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications, non-essential cookies), you may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

tbeej will not charge a fee for handling your data rights request in ordinary circumstances. We reserve the right to charge a reasonable administrative fee or refuse clearly unfounded or excessive requests, in which case we will explain our reasoning in writing.

12 Minors and Age Restrictions

tbeej is strictly a 21+ platform. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age, you are not permitted to register an account or use any tbeej service, and you must leave tbeej.io immediately.

If tbeej discovers or has reasonable grounds to believe that personal data has been collected from a person under 21, we will promptly close the associated account, void any balances, and securely delete the personal data in question. If you are a parent or guardian and believe that a minor in your care has registered a tbeej account, please contact us immediately at [email protected] with the subject line "Underage Account" so that we can investigate and take appropriate action.

13 Third-Party Links and Services

tbeej.io may display references to third-party game providers, payment partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard), and sports data providers in the context of delivering platform services. These third parties operate under their own privacy policies, and tbeej accepts no responsibility for their data practices. We encourage you to review the privacy policy of any third-party service you use in connection with your tbeej account.

tbeej does not embed third-party advertising networks, social media tracking pixels, or affiliate tracking scripts that would allow external parties to observe your behaviour on tbeej.io for their own commercial purposes.

14 Changes to This Privacy Policy

tbeej reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, the services we offer, or applicable legal requirements. When material changes are made, we will notify registered players via a notice displayed upon login to tbeej.io. The updated Policy will state the new effective date at the top of this document.

Your continued use of tbeej.io after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must cease using the platform and may request closure of your account by contacting [email protected].

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data tbeej holds about you, please reach out to our support team. All privacy communications are handled in English and are available 24 hours a day, 7 days a week.

For self-exclusion requests, responsible gaming tool applications, or account closure requests related to problem gambling, please reference "Responsible Gaming" in your subject line so your request is prioritised. You can also read more on our Responsible Gaming page.