Data Protection & Privacy — Formal Policy Document
tbeej Privacy Policy
This Privacy Policy explains how tbeej collects, stores, uses, and protects the personal information of players registered on the platform. We are committed to maintaining the confidentiality and security of your data at all times, in line with international data protection best practices.
Your Data, Protected
How tbeej Safeguards Your Privacy
End-to-End Encryption
Every piece of data transmitted between your device and the tbeej platform is protected by 256-bit SSL/TLS encryption — the same standard used by international banks and financial institutions.
Minimal Data Collection
tbeej collects only the personal data that is strictly necessary to operate your account, process transactions, verify your identity, and provide responsible gaming safeguards. We do not collect data beyond these operational requirements.
No Third-Party Selling
tbeej does not sell, rent, or trade your personal information to any third party for marketing purposes. Data shared with service providers is governed by strict contractual data protection obligations.
You Control Your Data
Registered players have the right to access, correct, and request deletion of their personal data at any time by contacting the tbeej support team. Your privacy preferences are respected and acted upon promptly.
Transparent Cookie Use
tbeej uses cookies strictly for session management, platform performance, and analytics. We do not use cookies to build advertising profiles or share browsing data with ad networks. Full details are in the Cookies section below.
Defined Retention Periods
Personal data is retained only for as long as is necessary to fulfil the purpose for which it was collected or as required by applicable financial record-keeping obligations. Account data is deleted upon expiry of the mandatory retention window.
1 Information We Collect
When you register for a tbeej account, interact with the platform, or contact our support team, we collect certain categories of personal information. The specific data collected depends on the nature of your interaction with tbeej and is always limited to what is operationally necessary.
Registration and Identity Data: When you create a tbeej account, we collect your full legal name, date of birth, residential address in Bangladesh, mobile phone number, and email address. Where identity verification is required — either as part of onboarding or during a withdrawal review — we may also collect a copy of your National Identity Card (NID), passport, or driving licence, along with a proof of residential address document such as a utility bill or bank statement.
Financial and Transaction Data: We collect details of all deposits and withdrawals processed through your tbeej account, including payment method identifiers (such as your bKash or Nagad mobile number, the last four digits of a card, or a bank account reference), transaction amounts in Bangladeshi Taka (৳), timestamps, and transaction status records. We do not store full card numbers or mobile wallet PINs at any point.
Gaming Activity Data: We maintain a complete record of your betting and casino play history, including bet amounts, game titles, outcomes, bonus activations, and session durations. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.
Technical and Device Data: When you access tbeej, our systems automatically collect certain technical information including your IP address, device type, operating system, browser type and version, and approximate geolocation derived from your IP address. This information is used to secure your account, detect fraudulent access, and optimise platform performance.
| Data Category | Examples | Collection Point |
|---|---|---|
| Identity Data | Full name, date of birth, NID number | Registration, KYC verification |
| Contact Data | Mobile number, email address, residential address | Registration, account updates |
| Financial Data | bKash number, Nagad reference, transaction history | Deposit and withdrawal processing |
| Gaming Data | Bet history, game sessions, bonus usage | Platform activity (automatic) |
| Technical Data | IP address, device type, browser, session logs | Platform access (automatic) |
| Communications Data | Support chat transcripts, email correspondence | Customer support interactions |
2 How We Use Your Data
tbeej uses your personal data only for the purposes described in this Privacy Policy. We process your data under one or more of the following legal bases: performance of our contract with you (operating your account), compliance with legal obligations (anti-money-laundering, age verification), our legitimate business interests (fraud prevention, platform security, service improvement), and your consent (where you have explicitly opted in to a specific use such as marketing communications).
- Account management: Creating, maintaining, and administering your tbeej player account, including processing deposits, withdrawals, and bonus credits.
- Identity verification: Verifying your age and identity as required to comply with responsible gaming obligations and to prevent underage gambling.
- Transaction processing: Processing payments via bKash, Nagad, Rocket, Upay, and other supported payment methods, and maintaining accurate financial records in Bangladeshi Taka.
- Fraud prevention and security: Detecting and investigating suspicious account activity, unauthorised access attempts, multi-accounting, bonus abuse, and potential money-laundering transactions.
- Responsible gaming compliance: Monitoring gaming behaviour to identify potential problem gambling indicators, applying self-exclusion measures, and enforcing deposit limits requested by players.
- Customer support: Responding to your enquiries, resolving disputes, and maintaining records of our support interactions for quality assurance.
- Platform improvement: Analysing aggregated, anonymised usage data to improve the tbeej platform's functionality, performance, and user experience.
- Marketing communications: Sending you information about promotions, new games, and platform updates, where you have given your consent to receive such communications. You may withdraw this consent at any time by contacting [email protected].
- Legal compliance: Meeting our obligations under applicable laws and cooperating with regulatory or law enforcement requests where legally required.
tbeej does not use automated decision-making processes that produce legally significant effects on individual players without human oversight. Where automated monitoring flags an account for investigation (for example, for suspected fraud or responsible gaming concerns), a member of the tbeej team reviews the flagged activity before any action is taken.
3 Data Sharing and Disclosure
tbeej does not sell, rent, or trade your personal information to any third party for commercial or marketing purposes. We may, however, share your data with carefully selected third parties where it is necessary to operate the tbeej platform, comply with legal obligations, or protect the rights and safety of our players and the platform.
Payment Service Providers: We share the minimum necessary transaction data with payment processors including bKash, Nagad, Rocket, Upay, Visa, and Mastercard to complete your deposit and withdrawal requests. These providers are bound by their own data protection policies and applicable financial regulations.
Identity Verification Partners: Where enhanced KYC (Know Your Customer) checks are required, we may share identity documents with specialist verification service providers who process the check on our behalf. These providers operate under strict contractual data processing agreements with tbeej.
Game Software Providers: To provide the casino and sportsbook experience, tbeej's platform integrates with licensed third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive a pseudonymised player session identifier to facilitate game-round logging and RTP auditing. They do not receive your name, contact details, or payment information.
Legal and Regulatory Disclosures: tbeej may disclose personal data to law enforcement agencies, financial intelligence units, sports integrity bodies, or other regulatory authorities where we are legally required to do so, or where disclosure is necessary to prevent, detect, or prosecute fraud, money laundering, match-fixing, or other criminal activity.
- We never sell personal data to data brokers or advertising networks.
- All third-party data processors are subject to written data processing agreements requiring them to protect your data to a standard equivalent to tbeej's own.
- We do not transfer your personal data outside of the jurisdictions in which our service providers operate without ensuring appropriate data protection safeguards are in place.
- In the event of a business reorganisation, merger, or acquisition, your data may be transferred to the successor entity, subject to the same privacy protections described in this policy.
4 Cookies and Tracking Technologies
tbeej uses cookies and similar tracking technologies on its platform. Cookies are small text files stored on your device that help the platform recognise you between sessions, maintain your login state, and gather performance data. The following table describes the categories of cookies used by tbeej.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Session management, authentication, security tokens. Required for the platform to function. Cannot be disabled. | Session / up to 24 hours |
| Functional | Remembering your language preference, display settings, and recent game selections to improve your experience across sessions. | Up to 30 days |
| Analytics | Aggregated, anonymised usage data to help tbeej understand how players navigate the platform and identify performance issues. | Up to 12 months |
| Fraud Prevention | Device fingerprinting tokens used to detect multi-accounting and unauthorised access attempts. Tied to your account security profile. | Up to 90 days |
tbeej does not use advertising or targeting cookies. We do not integrate third-party advertising SDKs or retargeting pixels on our platform. Analytics data collected via cookies is processed in aggregate form and is not linked to your individual identity.
You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your tbeej account and using core platform features. Disabling functional or analytics cookies will not affect your ability to bet or play casino games but may reduce the personalisation of your experience.
5 Data Security Measures
tbeej implements a layered approach to data security, combining technical controls, organisational policies, and staff training to protect your personal information against unauthorised access, disclosure, alteration, or destruction.
- 256-bit SSL/TLS encryption is applied to all data in transit between your device and the tbeej platform. This ensures that data cannot be intercepted or read by unauthorised parties during transmission.
- Data at rest encryption is applied to all personal data stored on tbeej servers. Database-level encryption ensures that even in the unlikely event of a physical breach, stored data remains unreadable without the appropriate decryption keys.
- Access controls: Access to personal data within tbeej's systems is restricted on a strict need-to-know basis. Staff with access to player data are subject to background checks, confidentiality agreements, and regular access reviews.
- Two-factor authentication is enforced for all tbeej staff accessing internal systems that contain player personal data.
- Intrusion detection and monitoring: tbeej's infrastructure is continuously monitored for unusual access patterns, potential intrusion attempts, and anomalous data export activity.
- Penetration testing: tbeej engages independent security specialists to conduct regular penetration tests of its platform infrastructure and application layer.
- Incident response: tbeej maintains a documented data breach response procedure. In the event of a data security incident that poses a risk to player rights, affected players will be notified promptly with details of the nature of the incident and the steps tbeej is taking to address it.
While tbeej takes all reasonable technical and organisational precautions to protect your personal data, no online platform can guarantee absolute security. You also play a role in keeping your account secure — use a strong, unique password and never share your login credentials with anyone.
6 Data Retention Policy
tbeej retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting obligations. The following retention periods apply to the main categories of personal data held by tbeej.
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and Identity Data | Duration of account + 5 years after closure | AML / KYC regulatory requirement |
| Financial Transaction Records | 7 years from transaction date | Financial record-keeping obligation |
| Gaming Activity Logs | 3 years from session date | Dispute resolution, responsible gaming audit |
| Support Communications | 2 years from last interaction | Quality assurance, dispute evidence |
| Marketing Consent Records | Until consent is withdrawn + 1 year | Consent accountability |
| Technical and Device Logs | 90 days from collection | Security monitoring, fraud detection |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an individual player. Anonymised, aggregated data (for example, platform usage statistics) may be retained indefinitely as it no longer constitutes personal data.
If you request deletion of your personal data before the end of a mandatory retention period, tbeej will restrict processing of your data (meaning it will not be used for any purpose other than meeting the legal obligation) and will delete it as soon as the retention obligation expires.
7 Your Privacy Rights
As a tbeej player, you have the following rights in relation to your personal data. To exercise any of these rights, contact the tbeej support team at [email protected] with the subject line "Privacy Rights Request". tbeej will respond to all valid requests within 30 days of receipt. No fee is charged for exercising your privacy rights in ordinary circumstances.
- Right of access: You have the right to request a copy of all personal data tbeej holds about you. This is sometimes called a Subject Access Request (SAR). We will provide the data in a structured, commonly used, and machine-readable format.
- Right to rectification: If any personal data tbeej holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update certain account details directly from within your tbeej account settings.
- Right to erasure: You have the right to request that tbeej delete your personal data, subject to any overriding legal obligations that require us to retain it (see Data Retention section above). Requests for erasure will be honoured in full once all mandatory retention periods have elapsed.
- Right to restrict processing: In certain circumstances, you may request that tbeej restrict the processing of your personal data — for example, while a dispute is being investigated. During a restriction, your data will be stored but not actively processed.
- Right to data portability: Where processing is based on your consent or on contract performance, you have the right to receive your personal data in a portable format for transfer to another service provider.
- Right to withdraw consent: Where tbeej processes your data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
- Right to object: You have the right to object to processing carried out on the basis of tbeej's legitimate interests. tbeej will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
8 Updates to This Policy
tbeej reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in our data processing practices, changes in applicable law, new platform features, or recommendations from data protection authorities. The date of the most recent revision is displayed prominently at the top of this document and on the hero section of this page.
Where changes to this Privacy Policy are material — meaning they significantly affect the way we collect, use, or share your personal data — tbeej will provide advance notice to registered players via email to the address associated with your account, or via an in-platform notification displayed upon your next login. Your continued use of the tbeej platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms.
If you do not agree with any changes to this Privacy Policy, you should cease using the tbeej platform and may request closure of your account by contacting [email protected]. tbeej will handle your data following account closure in accordance with the Data Retention Policy described in Section 6.
We encourage you to review this Privacy Policy periodically to stay informed about how tbeej protects your personal information. For any questions, concerns, or complaints regarding this policy or our data handling practices, contact us directly at [email protected]. All privacy enquiries are handled by tbeej's dedicated player support team and will be responded to within 30 days of receipt.
Questions About Your Privacy?
Our support team is available around the clock to handle data enquiries, privacy rights requests, and account questions. You can also explore our FAQ page for quick answers to common queries.
18+ only | Play Responsibly | Responsible Gaming