tabjee Privacy Policy

This Privacy Policy ("Policy") describes how tabjee ("we", "us", "the Platform") collects, processes, stores, and protects the personal data of individuals ("you", "Player", "User") who access or use the tabjee website at tabjee.ws and any associated mobile-optimised interface or service.

tabjee is committed to handling personal data responsibly and in accordance with internationally recognised data protection principles. While Bangladesh has its own evolving data protection framework, tabjee voluntarily adopts standards aligned with broadly accepted best practices — including principles from the General Data Protection Regulation (GDPR) — to ensure the highest level of protection for our players' information.

By registering an account, depositing funds, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between this Policy and those documents, this Policy governs with respect to data privacy matters.

tabjee collects personal data in several ways — directly from you when you register or interact with the Platform, automatically through technical systems as you browse, and occasionally from third parties engaged to verify your identity or process payments. The categories of data we collect are described below.

tabjee processes personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. Our primary purposes and the legal basis for each are set out below:

• Account management and service delivery: We use your registration data to create and maintain your account, process deposits and withdrawals, and deliver the betting and gaming services you have requested. This processing is necessary for the performance of the contract between you and tabjee.
• Identity verification and fraud prevention: We are obligated to verify that players are who they say they are and that they meet our minimum age requirement of 21 years. KYC and AML checks are carried out on a legal obligation basis.
• Customer support: When you contact tabjee support at [email protected], we use your account data and communication history to resolve your query efficiently.
• Responsible gaming monitoring: We analyse wagering patterns and session behaviour to identify players who may be at risk of problem gambling. This processing serves a legitimate interest in player welfare and harm prevention.
• Platform improvement and analytics: Aggregated, anonymised usage data helps us understand how the Platform is used, identify technical issues, and develop new features. This processing is based on our legitimate interest in operating a reliable and competitive service.
• Marketing communications: If you have opted in to receive promotional communications from tabjee, we may send you relevant offers and updates by email or SMS. You may withdraw consent at any time by contacting support or using the unsubscribe mechanism in any marketing message.
• Legal and regulatory compliance: We may process or retain data as required by applicable law, court order, or at the request of a competent authority.

tabjee does not use automated profiling for high-impact decisions (such as permanently blocking an account) without human review. Where automated systems flag an account for investigation, a human team member is involved in the final decision.

tabjee does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share data only with trusted service providers who are contractually bound to process it solely on our instructions and in accordance with this Policy. Categories of recipients include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — to facilitate deposits and withdrawals.
• Identity verification providers: Third-party KYC/AML platforms that assist in verifying player identity and screening against sanctions lists.
• Game software providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe receive anonymised session data necessary to operate their games. They do not receive full player profiles.
• IT infrastructure and hosting providers: Secure cloud hosting partners who store Platform data on servers protected by physical and logical security controls.
• Customer support tools: Ticketing and live-chat platforms used by our support team. These tools process support conversation data only.
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, courts, or regulators when required to do so by law, or to protect the rights and property of tabjee and its players.

Where data is transferred to service providers located outside Bangladesh, tabjee takes reasonable steps to ensure that appropriate contractual protections are in place to safeguard your information.

tabjee retains personal data for as long as necessary to fulfil the purposes described in this Policy, or for as long as required by applicable law. Our standard retention periods are as follows:

• Active account data: Retained for the lifetime of your account plus five (5) years following account closure, to enable us to respond to post-closure queries, disputes, or regulatory requests.
• Financial and transaction records: Retained for a minimum of seven (7) years from the date of the transaction, in compliance with general financial record-keeping best practices.
• KYC documents: Retained for five (5) years following the end of the customer relationship or as otherwise required by applicable anti-money laundering obligations.
• Support communications: Retained for three (3) years from the date of the last interaction, unless the communication relates to a formal dispute, in which case it is retained for the duration of the dispute resolution process plus two (2) years.
• Marketing consent records: Retained for the period of the consent plus two (2) years to demonstrate compliance in the event of a complaint.
• Technical logs (IP addresses, session data): Retained for up to ninety (90) days for security monitoring, then anonymised or deleted.

When retention periods expire, data is securely deleted or irreversibly anonymised so that it can no longer be linked to any individual. Anonymised aggregate statistics may be retained indefinitely for internal analytics purposes.

tabjee respects your right to control your own personal data. Depending on applicable law and the circumstances of your request, you may exercise the following rights by contacting us at [email protected]:

We will acknowledge your request within 72 hours and aim to complete it within 30 calendar days. In complex cases we may extend this period by a further 30 days, with prior notice to you. Note that some requests (for example, erasure requests) may be declined where retention is required for legal compliance or to defend a legitimate legal claim.

tabjee takes the security of your personal data seriously. We implement a layered set of technical and organisational safeguards to protect your information against unauthorised access, accidental loss, destruction, or alteration. Key measures include:

• SSL/TLS encryption on all data in transit between your device and our servers.
• AES-256 encryption for sensitive data fields stored at rest, including financial records and identity document references.
• Bcrypt password hashing — your password is never stored in plain text. Even tabjee staff cannot read your password.
• Role-based access controls limiting staff access to personal data strictly to those who need it for their job function.
• Regular security audits and vulnerability assessments conducted by independent third-party specialists.
• Multi-factor authentication (MFA) options available on player accounts to prevent unauthorised login.
• Intrusion detection systems monitoring for unusual activity patterns around the clock.

Despite these measures, no online platform can guarantee absolute security. In the unlikely event of a data breach that poses a material risk to your rights, tabjee will notify affected players without undue delay and take all reasonable steps to contain and remediate the incident.

You also have a role to play in keeping your account secure. Never share your password with anyone, use a unique password not reused across other websites, and contact support immediately at [email protected] if you suspect unauthorised access to your account.

tabjee uses cookies and similar technologies (local storage, session tokens) to operate the Platform and improve your experience. Cookies are small text files placed on your device when you visit the site. We use three categories of cookies:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens and CSRF protection tokens. You cannot opt out of these without disabling the Platform entirely.
• Functional cookies: Store your preferences (language, odds format, deposit method) so you do not need to re-enter them on each visit. These are activated only upon account login.
• Analytics cookies: Anonymised data about how pages are used, which features are most popular, and where users encounter difficulties. This data helps us improve the Platform. You may opt out of analytics cookies by contacting support.

tabjee does not use third-party advertising or retargeting cookies. We do not allow advertising networks to place tracking pixels on our Platform. Your browsing activity on tabjee is not shared with social media or ad-tech platforms.

Most browsers allow you to control cookies through their settings. Disabling strictly necessary cookies will prevent login and account access. Disabling functional cookies will reset your preferences on each visit.

tabjee is strictly for adults aged 21 and above. We do not knowingly collect or process personal data of persons under the age of 21. Our registration process includes an age declaration step and is followed by identity verification for all accounts that request withdrawals or reach defined activity thresholds.

If tabjee becomes aware that personal data has been collected from a person under 21, we will immediately suspend the account, delete the associated personal data to the extent permitted by legal retention obligations, and void any winnings or balances held in the account.

Parents and guardians who believe a minor may have registered on tabjee should contact us immediately at [email protected]. We will investigate and respond within 24 hours.

tabjee may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform features. When we make a material change to this Policy, we will notify registered players by email and display a prominent notice on the Platform for a minimum of 14 days before the change takes effect.

The "Last updated" date at the top of this Policy always reflects the most recent revision. We encourage you to review this page periodically to stay informed about how your data is being protected. Continued use of tabjee after the effective date of an updated Policy constitutes your acceptance of the revised terms.

For any questions about this Policy or to exercise your data rights, contact us at [email protected]. Our support team is available 24 hours a day, 7 days a week, including Eid and national public holidays in Bangladesh.