tebaje Privacy Policy

tebaje ("the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of every individual who visits, registers on, or interacts with the tebaje website at https://tebaje.biz and all associated services, mobile interfaces, and sub-domains (collectively, "the Platform"). This Privacy Policy ("Policy") describes in detail the categories of personal data we collect, the purposes for which we process that data, the lawful basis on which we rely for each processing activity, and the rights available to you as a data subject.

This Policy applies to all users of the tebaje Platform, including registered players, prospective players who visit the Platform without creating an account, and any other individual whose personal data we process in connection with the operation of tebaje. This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are published on this website and incorporated herein by reference.

tebaje operates primarily in the Bangladesh market and serves players located across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar, as well as Bangladeshi nationals and residents in other locations. Where you access the Platform from a jurisdiction other than Bangladesh, you remain responsible for ensuring that your use of the Platform and any transfer of your personal data is lawful under the laws of your local jurisdiction.

If you have any questions about this Policy or about how tebaje processes your personal data, please contact our support team at [email protected] (this email address is provided as plain text and is not a clickable link).

tebaje collects personal data in the following categories, depending on how you interact with the Platform:

tebaje does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or biometric data for the purposes of identification, except where expressly required by law or with your explicit consent. We do not knowingly collect personal data from individuals under the age of 18.

tebaje processes your personal data for the following specific purposes:

• Account creation and management: To register your account, verify your identity, maintain accurate records, and communicate account-related information such as password resets and security alerts.
• Service delivery: To provide access to the full range of tebaje products including sports betting, live casino, slots, and crash games, and to personalise your experience on the Platform based on your preferences and usage history.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and USDT, and to maintain a complete record of your transaction history.
• Identity verification and fraud prevention: To conduct Know Your Customer (KYC) checks, verify your age and identity, screen against sanctions lists, detect fraudulent activity, and prevent money laundering in accordance with applicable legal requirements.
• Responsible gaming: To monitor gameplay patterns and identify indicators of problem gambling behaviour, to enforce deposit limits, session limits, and self-exclusion requests, and to contact you if we have concerns about your gambling activity.
• Customer support: To respond to your enquiries, process complaints, and resolve disputes in a timely and fair manner.
• Marketing communications: To send you promotional offers, bonus notifications, and platform news, but only where you have provided explicit consent to receive such communications. You may withdraw this consent at any time.
• Platform improvement: To analyse aggregated and anonymised usage data to improve the performance, stability, and content of the tebaje Platform.
• Legal compliance: To fulfil our obligations under applicable law, to respond to lawful requests from regulatory authorities, and to enforce our Terms & Conditions.

tebaje processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is necessary to perform the contract between you and tebaje — for example, creating your account, processing your deposits and withdrawals, and delivering gaming services.
• Legitimate interests: Processing that serves tebaje's legitimate business interests, such as fraud detection, platform security, responsible gaming monitoring, and anonymised analytics — provided that those interests are not overridden by your fundamental rights and freedoms.
• Legal obligation: Processing that is required by applicable law, including identity verification, anti-money laundering checks, and responses to lawful requests from regulatory or law enforcement authorities.
• Consent: Processing that is based on your freely given, specific, informed, and unambiguous consent — most commonly for marketing communications. Where consent is the legal basis, you have the right to withdraw it at any time without affecting the lawfulness of prior processing.

tebaje does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial or marketing purposes under any circumstances. We may share your personal data with the following categories of third parties, and only to the extent necessary for the stated purpose:

• Payment service providers: bKash, Nagad, Rocket, Upay, and our banking and USDT processing partners receive financial data necessary to process your transactions. These providers operate under their own privacy policies and are bound by contractual data protection obligations with tebaje.
• Identity verification providers: Third-party KYC and age-verification services receive copies of your identity documents and personal details for the purpose of verifying your identity and age as required by our platform policies.
• Fraud prevention and AML services: We may share data with fraud detection and anti-money laundering screening services to identify suspicious activity and comply with our legal obligations.
• Game providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised or pseudonymised gameplay data necessary to deliver their games on the tebaje Platform. These providers do not receive your full identity or financial data.
• IT infrastructure and hosting providers: Our server hosting, cloud storage, and platform infrastructure providers have access to personal data as part of their service delivery. All such providers are bound by strict data processing agreements.
• Legal and regulatory authorities: tebaje will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by a valid legal obligation or lawful order. We will notify you of any such disclosure where we are legally permitted to do so.

All third-party service providers engaged by tebaje are required to process your personal data only on our documented instructions and to maintain security standards that are no less protective than those applied by tebaje itself.

The tebaje Platform uses cookies and similar tracking technologies to ensure the proper functioning of the website, maintain your session state, and gather anonymised analytics data. The following types of cookies are used:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They manage your login session, maintain security tokens, and remember your preferences such as language and currency settings. These cookies cannot be disabled without impairing core Platform functionality.
• Analytics cookies: We use anonymised analytics cookies to understand how players navigate the Platform, which pages are most visited, and where technical errors occur. This data is aggregated and does not identify individual users.
• Security cookies: These cookies help tebaje detect and prevent fraudulent login attempts, account takeovers, and other security threats by maintaining a record of trusted devices and sessions.

tebaje does not use third-party advertising cookies, social media tracking pixels, or cross-site behavioural targeting technologies. You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent certain features of the Platform from operating correctly.

tebaje retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Active account data: Retained for the duration of your account's existence on the Platform and for a period of five (5) years following permanent account closure.
• Financial transaction records: Retained for a minimum of seven (7) years from the date of each transaction, in accordance with financial record-keeping obligations.
• KYC and identity verification documents: Retained for five (5) years following the date of verification or account closure, whichever is later.
• Support and communication records: Retained for three (3) years from the date of the last communication, unless the records relate to an unresolved dispute, in which case they are retained until resolution and for one (1) year thereafter.
• Technical and usage data: Retained in anonymised or aggregated form for up to two (2) years for the purpose of platform analytics and improvement.

Where personal data is no longer required for the purpose for which it was collected and no legal retention obligation applies, tebaje will securely delete or permanently anonymise that data in a manner that prevents reconstruction of your identity.

tebaje employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes the following:

• TLS (Transport Layer Security) encryption for all data transmitted between your device and the tebaje Platform, indicated by the HTTPS protocol in your browser address bar.
• AES-256 encryption for sensitive data stored on our servers, including financial records, identity documents, and authentication credentials.
• Role-based access controls that restrict access to personal data to only those tebaje employees and contractors who require it to perform their specific job function.
• Regular security audits, penetration testing, and vulnerability assessments conducted by qualified internal and external security professionals.
• Multi-factor authentication requirements for all tebaje administrative accounts that have access to player data.
• A documented incident response plan that ensures timely detection, containment, and notification in the event of a data security breach.

While tebaje takes every reasonable precaution to protect your personal data, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. We will notify affected users and, where required, relevant authorities, in the event of a material data security breach that poses a risk to your rights and freedoms, within the timeframes required by applicable law.

As a data subject, you have the following rights in relation to the personal data that tebaje holds about you. To exercise any of these rights, please contact us at [email protected] (displayed as plain text — not a clickable link). We will respond to all rights requests within 30 calendar days of receipt.

• Right of access: You have the right to request a copy of all personal data that tebaje holds about you, together with information about how it is processed and on what legal basis.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data that tebaje holds about you. For most account details, you can make corrections directly from within your account settings.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to any overriding legal retention obligations.
• Right to restrict processing: You have the right to request that tebaje restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you object to processing based on legitimate interests.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where tebaje relies on legitimate interests as the legal basis. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time by contacting support or adjusting your communication preferences in your account settings. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.

The tebaje Platform is strictly intended for adults aged 18 years and above. tebaje does not knowingly collect, solicit, or process personal data from any individual under the age of 18. Our registration process includes age verification steps designed to prevent underage access.

If tebaje becomes aware that personal data has been collected from an individual under the age of 18 without appropriate parental or guardian consent, we will take immediate steps to delete that data and permanently close the associated account. If you believe that a minor has created a tebaje account or submitted personal data to the Platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

Parents and guardians who are concerned about underage access to online gambling platforms are encouraged to use parental control software and to review the resources available on our Responsible Gaming page.

The tebaje Platform may contain references to third-party game providers and payment partners. Where such third parties operate their own platforms or services, they do so under their own independent privacy policies. tebaje does not control, and is not responsible for, the privacy practices of any third-party service provider, game studio, or payment processor.

We encourage you to review the privacy policies of any third-party services you use in connection with the tebaje Platform, particularly the privacy policies of payment providers such as bKash, Nagad, and Rocket, which govern the handling of your mobile financial service data on their respective platforms.

tebaje treats financial data with the highest level of sensitivity and applies enhanced security measures to all payment-related information. The following specific rules apply to the handling of payment data on the tebaje Platform:

• Full payment account numbers (bKash, Nagad, Rocket, bank account numbers) are stored in encrypted form and are never displayed in full within the Platform interface after the initial entry.
• USDT wallet addresses used for cryptocurrency deposits and withdrawals are stored in encrypted form. tebaje does not store private keys or seed phrases associated with any cryptocurrency wallet.
• Payment data is shared only with the specific payment processor required to complete your requested transaction. It is not shared with any other third party, including game providers or marketing partners.
• Transaction histories are retained for the period specified in Section 7 (Data Retention) and are available for your review at any time from within your account dashboard.
• Where tebaje suspects that a payment instrument has been used fraudulently or without the account holder's authorisation, we will suspend the associated transaction and may request additional verification before releasing funds.

tebaje's primary operations and data storage infrastructure are oriented towards serving the Bangladesh market. In the course of operating the Platform, some personal data may be transferred to or processed in countries outside Bangladesh, for example in connection with our use of international cloud hosting providers, game studio integrations, or KYC verification services.

Where personal data is transferred internationally, tebaje takes reasonable steps to ensure that it is afforded a level of protection consistent with the principles set out in this Privacy Policy. This includes entering into contractual arrangements with data processors that impose data protection obligations equivalent to those applied by tebaje, and selecting processors with established information security certifications where available.

By using the tebaje Platform, you acknowledge that your personal data may be transferred to and processed in countries outside Bangladesh. If you have any concerns about specific international data transfers, please contact us at [email protected].

tebaje reserves the right to update, amend, or replace this Privacy Policy at any time in response to changes in applicable law, changes in our data processing activities, or improvements to our privacy practices. The date of the most recent revision is displayed at the top of this document.

Where changes to this Policy are material — for example, where we introduce a new purpose for processing or share data with a new category of third party — we will notify registered players by email and by a prominent notice on the Platform at least seven (7) days before the changes take effect. Your continued use of the Platform after the effective date of any updated Policy constitutes your acknowledgment of and agreement to the revised terms.

We encourage you to review this Privacy Policy periodically to stay informed about how tebaje protects your personal data. Archived versions of previous policies are available upon request by contacting our support team.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which tebaje processes your personal data, please contact us through the following channels. All contact details are provided as plain text and are not clickable links:

• Email: [email protected]
• WhatsApp: +880 1700 000000
• Live Chat: Available 24/7 inside your tebaje account dashboard after logging in.

Our support team is available 24 hours a day, 7 days a week, including Bangladeshi public holidays. We aim to acknowledge all privacy-related enquiries within 48 hours and to resolve all complaints and rights requests within 30 calendar days. Where a request is particularly complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reasons for it.