Privacy Policy — How tabji Collects, Uses & Protects Your Personal Data

When you interact with the tabji platform — whether by browsing tabji.app, registering an account, making a deposit, placing a wager, or contacting our support team — tabji collects certain categories of personal data. The categories and specific data points collected depend on the nature of your interaction with us.

1.1 Data You Provide Directly

The following personal data is collected directly from you during registration, account management, KYC verification, or when you contact tabji's support team:

1.2 Data Collected Automatically

When you visit or use tabji.app, certain technical and behavioural data is collected automatically by our systems and third-party analytics tools:

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and time zone setting.
• Usage Data: Pages visited, games played, betting history, session duration, click patterns, and feature usage.
• Location Data: Approximate geographic location derived from your IP address (country and city level only — we do not access GPS-level location data without your explicit consent).
• Cookie & Tracking Data: Session identifiers, preference cookies, and analytics cookies as described in Section 4 of this Privacy Policy.

1.3 Data We Do Not Collect

tabji does not collect or process special category data (also known as sensitive personal data) such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for age and identity verification. We do not collect information about your contacts, your social media profiles, or your device's stored files, media, or messages.

tabji uses the personal data we collect only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The primary purposes for which tabji processes your personal data are as follows:

2.1 Service Delivery

The most fundamental use of your personal data is to provide you with the tabji service. This includes creating and managing your account, processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods, enabling you to place bets and play casino games, and delivering the customer support you request. Without this processing, tabji could not operate as a platform.

2.2 Identity Verification & Fraud Prevention

tabji is legally and operationally required to verify the identity and age of all registered users. Your identity and financial data is used to conduct Know Your Customer (KYC) checks, confirm that you are 18 years of age or older, verify that payment methods belong to you, and detect and prevent fraudulent activity, money laundering, and other financial crimes. This processing is necessary for tabji to comply with its legal obligations and to protect the integrity of the platform.

2.3 Platform Improvement & Analytics

Aggregated and anonymised usage data is analysed by tabji's product and technology teams to understand how users interact with the platform, identify technical issues, and prioritise improvements to the game library, betting interfaces, payment flows, and overall user experience. Where individual-level data is used for analytics purposes, it is handled in accordance with the data minimisation principles set out in this Privacy Policy.

2.4 Responsible Gaming

tabji uses your account activity data — including deposit frequency, wagering patterns, session duration, and self-exclusion history — to monitor for signs of problem gambling behaviour. Where our systems detect patterns consistent with a player at risk, our responsible gaming team may reach out proactively, apply cooling-off periods, or trigger responsible gaming prompts. This processing is carried out in the legitimate interest of player welfare and in compliance with responsible gaming standards.

2.5 Marketing Communications

With your explicit consent, tabji may send you promotional emails and SMS messages about new games, deposit bonuses, seasonal promotions (including Eid, Pohela Boishakh, and Victory Day specials), and cricket betting markets. You may withdraw your consent to marketing communications at any time by clicking the unsubscribe link in any marketing email or by contacting [email protected]. Withdrawal of marketing consent does not affect the processing of your data for service delivery or legal compliance purposes.

tabji may share your personal data with the following categories of third parties in the following circumstances:

3.1 Payment Service Providers

To process deposits and withdrawals, tabji shares the minimum necessary financial and identity data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and Visa/Mastercard network processors. These providers receive only the data required to authorise and settle your transaction and are contractually prohibited from using your data for any other purpose.

3.2 Game Software Providers

tabji's casino games are powered by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game, certain technical data (including a session token, your account currency, and your language preference) is shared with the relevant game provider to initialise your game session. Game providers do not receive your full identity data, financial account details, or contact information.

3.3 Identity Verification Services

tabji may use third-party identity verification providers to conduct or assist with KYC checks. Where such providers are used, your identity documents and biographic data are shared solely for the purpose of verification and are handled in accordance with the provider's own privacy policy, which tabji reviews as part of its vendor due diligence process.

3.4 Legal & Regulatory Disclosures

tabji may be required to disclose your personal data to law enforcement agencies, courts, or regulatory bodies in response to a valid legal process, including court orders, subpoenas, or regulatory investigations. tabji will, where legally permissible, notify the affected user of any such disclosure request before complying.

3.5 Analytics & Technology Partners

tabji uses third-party technology providers for website analytics, fraud detection, and platform monitoring. These providers process technical and usage data on tabji's behalf under data processing agreements that restrict their use of your data to the purposes for which it was shared. Personal data shared with analytics providers is pseudonymised wherever technically feasible.

tabji.app uses cookies and similar tracking technologies — including local storage objects and session tokens — to operate the platform effectively and deliver a personalised experience. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.

4.1 Types of Cookies Used by tabji

4.2 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most modern browsers allow you to view the cookies stored on your device, delete individual cookies, block cookies from specific websites, or block all third-party cookies. Please note that disabling strictly necessary cookies will impair the functionality of tabji.app — you may not be able to remain logged in or access certain features.

To manage cookies in your browser, refer to the help documentation for your specific browser (Chrome, Firefox, Safari, Edge, or Samsung Internet). Instructions for adjusting cookie settings are typically found under the browser's Privacy or Security settings menu.

4.3 Do Not Track

Some browsers offer a "Do Not Track" (DNT) feature that sends a signal to websites requesting that your browsing activity not be tracked. tabji's platform does not currently modify its data collection practices in response to DNT signals, as there is no universally accepted standard for how websites should respond to these signals. tabji will revisit this position as DNT standards evolve.

tabji retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply to the main categories of personal data held by tabji:

• Account Data (identity, contact): Retained for the lifetime of your account and for a period of five (5) years following permanent account closure, to comply with anti-money laundering record-keeping obligations.
• Financial Transaction Data: Retained for seven (7) years from the date of the transaction, in accordance with financial record-keeping requirements applicable in Bangladesh.
• KYC Verification Documents: Retained for five (5) years following account closure or the date of the last verified transaction, whichever is later.
• Support Communications: Retained for three (3) years from the date of the communication, to enable tabji to refer to prior interactions in the event of a follow-up complaint.
• Marketing Consent Records: Retained for the duration of your consent and for three (3) years following withdrawal of consent, as evidence of lawful marketing activity.
• Technical & Usage Data (anonymised): Retained indefinitely in anonymised, aggregated form for platform analytics and improvement purposes.

5.1 Data Storage Location

tabji stores personal data on secure servers. Data relating to Bangladeshi users is processed within data centres that operate appropriate technical and organisational security measures. Where data is transferred internationally for processing by a third-party service provider (for example, a cloud-based fraud detection system), tabji ensures that appropriate contractual and technical safeguards are in place to protect your data to a standard equivalent to that required under applicable Bangladeshi data protection law.

5.2 Data Deletion

Upon expiry of the applicable retention period, personal data is securely deleted from tabji's systems using industry-standard deletion methods. Where complete deletion is not immediately technically feasible (for example, in the case of backup storage systems), the data is isolated and protected from active processing until it can be permanently deleted in the next scheduled backup purge cycle.

As a tabji user, you have a number of rights in relation to the personal data we hold about you. These rights are set out below. To exercise any of these rights, please contact tabji's support team at [email protected] with the subject line "Privacy Rights Request", including your full name and registered email address so we can verify your identity before processing your request.

6.1 Right of Access

You have the right to request a copy of the personal data that tabji holds about you, along with information about how that data is being used. tabji will provide this information in a structured, commonly used, and machine-readable format within a reasonable timeframe following identity verification.

6.2 Right to Rectification

If any personal data held by tabji is inaccurate or incomplete, you have the right to request that it be corrected. You can update most account details — including your email address, phone number, and residential address — directly through the account settings section of tabji.app. For corrections to identity data (such as your legal name or date of birth), please contact [email protected] and provide appropriate documentary evidence of the correct information.

6.3 Right to Erasure

You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw your consent and no other lawful basis for processing exists, or where the data has been unlawfully processed. Please note that tabji may be required to retain certain data beyond your erasure request to comply with financial record-keeping obligations, anti-money laundering laws, or to defend against a legal claim.

6.4 Right to Restrict Processing

In certain circumstances — for example, while the accuracy of your data is being contested, or where you have objected to processing — you have the right to request that tabji restrict the processing of your personal data. During a restriction period, tabji may store your data but will not actively process it, except to establish, exercise, or defend legal claims.

6.5 Right to Object to Marketing

You have an unconditional right to object to the processing of your personal data for direct marketing purposes. tabji will cease all marketing communications upon receipt of your objection, with no requirement to provide a reason. Marketing opt-out requests will be processed within five business days.

tabji implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. The following measures are among those in place on the tabji platform:

• 256-bit SSL/TLS Encryption: All data in transit between your browser or app and tabji's servers is encrypted using industry-standard Transport Layer Security (TLS) protocols. The tabji.app connection is secured with an up-to-date SSL certificate at all times.
• Encrypted Data at Rest: Sensitive personal data, including identity documents and financial account details, is encrypted in tabji's databases using AES-256 encryption. Encryption keys are managed separately from the encrypted data.
• Access Controls: Access to systems containing personal data is restricted to authorised tabji personnel only, on a need-to-know basis. All internal system access is logged and subject to regular access review audits.
• Two-Factor Authentication: tabji offers two-factor authentication (2FA) to all registered users to protect against unauthorised account access. Internal tabji systems that process personal data also require 2FA for staff login.
• Fraud Detection Systems: Automated fraud detection systems monitor account activity in real time, flagging unusual login patterns, suspicious financial transactions, and potential account takeover attempts for manual review.
• Penetration Testing: tabji's platform undergoes regular third-party security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.

7.1 Data Breach Response

In the event that tabji experiences a personal data breach that poses a risk to your rights and freedoms, tabji will notify affected users without undue delay following the discovery of the breach. Notification will be provided via the email address registered to your account and, where the breach is of a significant scale, via a prominent notice on tabji.app. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures tabji has taken or proposes to take to address it.

7.2 Your Role in Data Security

While tabji takes extensive measures to protect your data, the security of your account also depends on actions you take. tabji strongly encourages all users to: choose a strong, unique password for their tabji account; enable two-factor authentication; log out of their account when using shared or public devices; and never share their login credentials with any third party, including individuals claiming to represent tabji. tabji will never ask for your password via email, live chat, or any other channel.

8.1 Changes to This Privacy Policy

tabji reserves the right to update this Privacy Policy at any time to reflect changes to our data processing practices, applicable law, or the evolution of the tabji platform. When a material change is made to this Privacy Policy, registered users will be notified via email at the address associated with their account. The updated Privacy Policy will be published on tabji.app with a revised "Effective Date" at the top of the document. Continued use of the tabji platform following notification of an update constitutes acceptance of the revised Privacy Policy.

tabji recommends that you review this Privacy Policy periodically — at minimum when you receive a notification of an update — to stay informed about how your personal data is being handled. The version history of this Privacy Policy is available on request by contacting [email protected].

8.2 How to Contact tabji About Privacy

If you have any questions, concerns, or complaints about this Privacy Policy or about the way tabji handles your personal data, please contact our support team using the details below. tabji treats all privacy-related enquiries seriously and aims to resolve them promptly and fairly.

8.3 Governing Law

This Privacy Policy is governed by and construed in accordance with the laws applicable in Bangladesh. Any dispute arising from or in connection with this Privacy Policy shall be subject to the jurisdiction of the competent courts of Bangladesh. tabji is committed to handling all privacy matters in good faith and with transparency.