Tbaja Privacy Policy — Your Data, Our Responsibility

Tbaja (tbaja.ws) is a trusted online Sports Betting platform in Bangladesh. We believe every user's personal data is a sensitive asset. This Privacy Policy ("Policy") applies to all users of the tbaja.ws website and its associated mobile applications.

This Privacy Policy clearly outlines what types of data we collect, how they are used, how they are kept secure, and what legal rights you have. By using any tbaja service, you agree to this Privacy Policy.

Tbaja only collects data that is genuinely necessary to provide its services. Collecting excessive or unnecessary information goes against our policy.

Types of Data	Example	When It's Collected
Identity Information	Name, date of birth, national ID number	During registration and KYC verification
Contact Information	Mobile number, email address	During Registration & Profile Updates
Financial Information	BKash/Nagad number, transaction history	During deposits and withdrawals
Device Information	IP address, browser type, operating system	Automatically collected during site visits
Usage Data	Betting history, login times, pages visited	During Platform Use
Verification Documents	NID copy, passport, selfie	During KYC verification (where applicable)

How We Collect Information

• Directly Provided: What you provide through registration forms, profile updates, or when contacting support.
• Automatically Collected: Platform usage data collected via cookies, web beacons, or log files.
• From Third Parties: Limited data received from payment providers or identity verification agencies.

Tbaja uses your information only for specific, legitimate purposes. Each purpose is clearly outlined below:

• Account Creation & Management: Completing the registration process, confirming login, and keeping your account secure.
• Identity Verification: Conducting KYC verification to prevent fraud and confirm user age.
• Financial Transactions: Processing deposits, handling withdrawals, and ensuring transaction security.
• Customer Support: Resolving support tickets, handling complaints, and providing assistance.
• Security Assurance: Detecting fraudulent activity and maintaining cybersecurity.
• Legal Obligations: Meeting regulatory requirements and fulfilling legal obligations.
• Service Improvement: Analyzing user experience to continuously improve tbaja's services.
• Sending Notifications: Notifying you about important account updates, bonuses, or promotions (subject to your consent).

Tbaja does not sell or rent your personal data to any third party. Data may only be shared in the following limited and specific circumstances:

Service Provider Partners

Payment processors (bKash, Nagad, Rocket), identity verification agencies, and IT infrastructure providers receive limited data — only what is necessary to carry out their specific functions. All such partners are bound by strict confidentiality agreements.

For Legal Purposes

Data may be disclosed in response to a court order, government investigation, or lawful request from a law enforcement authority. In such cases, we always operate within the bounds of the law and provide only the minimum information required.

For Fraud Prevention

We are legally required to notify the relevant authorities if any activity suspected of money laundering, fraud, or terrorist financing is detected.

To keep your data safe, tbaja employs multiple layers of technical and organizational security measures, all in line with the highest industry standards.

• AES-256 Encryption: All sensitive data stored with us is protected by military-grade encryption.
• SSL/TLS Protocol: All communications on the website and app are transmitted over encrypted connections.
• Two-Factor Authentication (2FA): An additional layer of security for login and sensitive activities.
• Firewall & Anti-DDoS: Protection of server and user data against external threats.
• Regular Security Audits: Regular security audits are conducted by independent external experts.
• Access Control: Only authorized personnel are granted access to the data they need.
• Data Backup: Data is regularly backed up to secure locations.

That said, no system on the internet is 100% secure. If we ever suspect a security incident, we will notify you promptly and take all necessary steps.

Tbaja uses cookies to keep the website functioning properly. Cookies are small text files stored on your device. We only use the following types of cookies:

Cookie Type	Purpose	Duration
Essential Cookies	Maintaining login sessions, security tokens	Until end of session
Preference Cookies	Remembering language, theme, and user preferences	30 days
Analytics Cookies	Understanding which parts of the site are used most	90 days

Tbaja does not use third-party advertising or tracking cookies. You can delete or block cookies at any time through your browser settings, though some features may not function properly as a result.

Tbaja does not retain any data beyond what is necessary. Retention periods are determined by the type of data:

• Account Information: For as long as your account is active, and for up to 5 years after closure as required by law.
• Financial Transaction Details: A minimum of 5 years, in accordance with Bangladesh's financial regulations.
• KYC Documents: Up to 5 years after account closure, after which it is securely destroyed.
• Betting History: For the duration of your active account and 2 years after closure.
• Log & Access Data: Up to 12 months.
• Support Contact: 1 year after resolution.

Once the retention period expires, data is securely and permanently deleted to ensure it cannot be recovered.

Every tbaja user has the following rights over their own data. Contact us to exercise any of these rights.

To exercise any of these rights, email us at support@tbaja.ws. We will respond to your request within 30 days.

Tbaja strictly prohibits use by anyone under the age of 18. Our Privacy Policy includes specific measures to protect the data of minors.

• Age verification is required at registration.
• We never knowingly collect personal data from anyone under the age of 18.
• If a minor is found to have registered, their account and all associated data will be deleted immediately.
• If you have any concerns, parents can reach us at support@tbaja.ws.

Tbaja may update this Privacy Policy from time to time. Depending on the nature of the changes, we will notify you in the following ways:

• Minor changes: A notice on the website and an updated date at the top of the page.
• Major Changes: Sending notifications to your registered email or via the platform.
• Major Changes: At least 30 days' notice before changes take effect.

Continuing to use tbaja after any changes have been made means you accept the updated policy. We recommend checking this page regularly to stay informed.

For any questions, concerns, or requests regarding our Privacy Policy, please get in touch. We're always happy to help.