tbaee Privacy Policy

01 Introduction

tbaee ("we", "us", "our") operates the online betting and casino platform accessible at tbaee.ws and its associated subdomains and mobile interfaces (collectively, the "Platform"). This Privacy Policy explains how tbaee collects, uses, stores, shares, and protects personal data relating to individuals who access or use the Platform ("you" or "your").

We are committed to processing your personal data lawfully, fairly, and transparently. This policy has been written in plain English so that you clearly understand your rights and our obligations before you register an account or use any tbaee service. Please read it carefully. By registering a tbaee account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy should be read alongside our Terms and Conditions and our Responsible Gaming Policy, both of which form part of the overall agreement between you and tbaee. In the event of any conflict between this Privacy Policy and the Terms and Conditions regarding data matters, this Privacy Policy shall take precedence.

02 Data We Collect

tbaee collects the following categories of personal data. We collect only what is necessary and proportionate to deliver our services safely and in compliance with applicable obligations.

We do not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, unless specifically required for identity verification purposes and only with your explicit consent where mandated by applicable law.

03 How We Collect Your Data

tbaee collects your personal data through the following channels:

• Direct registration: When you create a tbaee account, you provide your name, date of birth, mobile number, email address, and payment method details directly through the registration form.
• Identity verification: When you submit KYC documents such as your National ID card, passport, or driving licence to verify your account or unlock withdrawal functionality.
• Transactions: When you make a deposit or withdrawal, financial data is exchanged between tbaee and your chosen payment provider (bKash, Nagad, Rocket, Upay, or a bank).
• Platform usage: Automatically, as you browse and interact with the tbaee Platform, through server logs, session tracking, and analytics tools that record technical and usage data.
• Customer support: When you contact our support team via live chat, email at [email protected], or WhatsApp, your communications and any data you share are recorded for the purpose of resolving your query.
• Third-party game providers: Game providers such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe may share session data and game outcome data with tbaee for the purposes of dispute resolution and responsible gaming monitoring.

04 Legal Basis for Processing

tbaee processes your personal data only where a valid legal basis exists. The following legal bases apply to our processing activities:

• Contractual necessity: Processing that is required to fulfil the contract between you and tbaee — including account management, transaction processing, game delivery, and support — is carried out on the basis of contractual necessity. Without this processing, we cannot provide the Platform services to you.
• Legal obligation: tbaee is required by applicable law to process certain personal data for anti-money laundering (AML) compliance, know-your-customer (KYC) verification, age verification, and fraud prevention. This processing is mandatory and cannot be opted out of.
• Legitimate interests: Some processing activities — such as platform security monitoring, fraud detection, responsible gaming analytics, and internal business reporting — are carried out on the basis of tbaee's legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where tbaee sends you optional marketing communications (such as promotional emails, SMS updates on bonus offers, or BPL/IPL seasonal campaigns), we rely on your freely given, specific, informed consent. You may withdraw consent for marketing communications at any time by contacting [email protected].

05 How We Use Your Data

tbaee uses the personal data we collect for the following defined purposes. We do not use your data for any purpose that is incompatible with the reason for which it was originally collected.

• To create, manage, and maintain your tbaee account, including verifying your identity and age (21+ requirement) at registration and periodically thereafter.
• To process your deposits and withdrawals through bKash, Nagad, Rocket, Upay, and bank transfer channels, and to maintain accurate transaction records.
• To deliver betting markets, casino games, live dealer services, and all other Platform features you have requested.
• To apply bonuses, promotions, and loyalty rewards to your account in accordance with the applicable promotional terms.
• To monitor betting and gaming patterns for the purposes of identifying and addressing problem gambling behaviours under our Responsible Gaming obligations.
• To detect, investigate, and prevent fraudulent activity, account abuse, collusion, money laundering, and other prohibited conduct as defined in our Terms and Conditions.
• To respond to your customer support queries, complaints, and dispute requests in a timely and accurate manner.
• To send you service notifications, account security alerts, and transactional communications that are necessary for the operation of your account.
• To send you optional marketing communications about tbaee promotions, new features, and seasonal cricket events — where you have provided consent to receive them.
• To analyse Platform usage patterns at an aggregated level in order to improve the tbaee user experience, fix technical issues, and develop new features.
• To comply with applicable legal and regulatory requirements, including responding to lawful requests from competent authorities.

06 Sharing Your Data

tbaee does not sell, rent, or trade your personal data to any third party. We share your personal data only in the following limited and controlled circumstances:

• Payment processors: Your financial data is shared with your chosen payment provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, or other partner institutions) solely for the purpose of executing your requested deposit or withdrawal. Each payment provider processes your data under their own privacy policy.
• Game providers: Session and outcome data is shared with licensed third-party game studios — including Evolution Gaming, Pragmatic Play Live, Ezugi, NetEnt, Microgaming, and Spribe — to the extent necessary to deliver their games and resolve game-related disputes.
• Identity verification services: Where KYC or age verification requires document authentication, we may share relevant identity data with a third-party verification provider operating under a strict data processing agreement with tbaee.
• Fraud prevention and security partners: Aggregated or pseudonymised technical data may be shared with cybersecurity and fraud detection partners to protect the integrity of the Platform and its users.
• Legal and regulatory authorities: Where tbaee is required by law, court order, or a lawful request from a competent authority to disclose personal data, we will comply with such obligations. We will notify affected users where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the tbaee business, your personal data may be transferred to the acquiring entity. You will be notified in advance of any such transfer that materially affects your data rights.

All third parties with whom tbaee shares personal data are required to process that data securely, in accordance with applicable data protection standards, and solely for the purposes for which it was shared. tbaee does not permit third-party service providers to use your data for their own commercial purposes.

07 Cookies & Tracking Technologies

tbaee uses cookies and similar browser-based tracking technologies on the Platform. A cookie is a small text file placed on your device by a website server. The following types of cookies are used:

• Strictly necessary cookies: These are essential for the Platform to function. They maintain your logged-in session, store your language and currency preferences, and protect against cross-site request forgery (CSRF). These cookies cannot be disabled without preventing core Platform functionality.
• Performance and analytics cookies: These cookies collect anonymised data about how users navigate the Platform — which pages are visited, how long users spend on each section, and where errors occur. This data helps us improve Platform performance and user experience. No personally identifiable information is transmitted to analytics systems.
• Functional cookies: These remember your preferences and settings — such as your preferred deposit method or notification settings — so you do not need to reconfigure them on each visit.

tbaee does not deploy third-party advertising cookies, social media tracking pixels, or cross-site behavioural profiling technologies on the Platform. You will not be tracked across other websites based on your activity on tbaee.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the Platform. Most modern browsers allow you to review, delete, and block cookies — please refer to your browser's help documentation for instructions.

08 Data Retention

tbaee retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account data (identity, contact, financial): Retained for the duration of your active account relationship with tbaee, and for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required for financial compliance and audit purposes.
• Betting and gaming history: Retained for the duration of your account and for three (3) years following account closure, for dispute resolution and responsible gaming monitoring purposes.
• Customer support communications: Retained for two (2) years from the date of the relevant interaction, to allow for escalated complaint handling and quality review.
• Technical and usage data (logs, IP records): Retained for twelve (12) months from the date of collection, after which it is anonymised or deleted.
• Marketing consent records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, as evidence of your preferences.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data anonymisation is not technically feasible, the data is archived with access restrictions that prevent it from being used in any identifiable manner.

09 Data Security

tbaee takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption: All data transmitted between your device and tbaee servers is protected using TLS 1.3 (Transport Layer Security). Data stored on tbaee systems is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data is restricted to authorised tbaee personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• OTP authentication: Account login and withdrawal requests require one-time password (OTP) verification via your registered mobile number, providing a second layer of authentication beyond your password.
• Intrusion detection: tbaee systems are monitored continuously for anomalous activity, unauthorised access attempts, and indicators of compromise. Our security team operates 24/7 and is equipped to respond to incidents in real time.
• Vulnerability management: The tbaee Platform undergoes regular security assessments, including penetration testing and code review, to identify and remediate vulnerabilities before they can be exploited.
• Incident response: tbaee maintains a formal data breach response plan. In the event of a confirmed breach that affects your personal data, we will notify you promptly with details of what was affected and the steps we are taking to address the situation.

While tbaee takes every reasonable precaution to secure your data, no digital platform can guarantee absolute security. You are encouraged to use a strong, unique password for your tbaee account, to enable OTP authentication, and to contact us immediately at [email protected] if you suspect any unauthorised activity on your account.

10 Your Rights

You have the following rights in relation to the personal data that tbaee holds about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and include your registered account username and a description of your request.

• Right of access: You may request a copy of the personal data tbaee holds about you, along with information about how it is being processed. We will provide this within a reasonable timeframe following verification of your identity.
• Right to rectification: If any of your personal data is inaccurate or incomplete, you have the right to request that it be corrected. For basic account details, you may be able to update information directly through the account settings dashboard.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and no other legal basis for processing applies. This right is subject to tbaee's legal obligations to retain certain data for specified periods (see Section 08).
• Right to restriction: You may request that tbaee restricts the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing pending a determination of our legitimate interests.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of tbaee's legitimate interests. You also have an unconditional right to object to direct marketing processing at any time.
• Right to withdraw consent: Where processing is based on your consent — such as for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

tbaee will respond to all valid data rights requests within thirty (30) days. Where a request is complex or numerous, we may extend this period by a further sixty (60) days, in which case we will notify you of the extension and the reasons for it.

11 Children's Privacy

The tbaee Platform is strictly intended for adults aged 21 years and over. tbaee does not knowingly collect, process, or store personal data from any individual under the age of 21. Our registration process requires all users to confirm their date of birth, and we reserve the right to request documentary proof of age at any point.

If tbaee becomes aware that personal data has been collected from a person under the age of 21 without appropriate verification, we will take immediate steps to delete that data and close the associated account. If you believe that a person under 21 has registered a tbaee account, please contact us immediately at [email protected] so that we can investigate and take the necessary action.

Parents and guardians who are concerned about underage access to online gambling platforms are encouraged to use parental control and internet filtering software tools to restrict access to gambling websites on shared or family devices.

12 Third-Party Links

The tbaee Platform may contain references to third-party game providers, payment partners, and sports data providers. While tbaee takes care to work only with reputable partners, we have no control over and accept no responsibility for the privacy practices or content of third-party websites, platforms, or services that operate independently of tbaee.

When you interact with a third-party game provider's interface — such as a live dealer studio operated by Evolution Gaming or Pragmatic Play Live — that provider's own privacy policy governs the processing of any data you share directly with their systems. We encourage you to review the privacy policies of any third-party providers whose services you access through the tbaee Platform.

Similarly, when you use bKash, Nagad, Rocket, or Upay to make a deposit or withdrawal, those transactions are subject to the respective payment provider's terms and privacy policy, in addition to tbaee's own data practices.

13 Amendments to This Policy

tbaee reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. Any material changes to this policy will be communicated to registered users via email notification to the address on file, or via a prominent notice displayed within the Platform, no less than seven (7) days before the changes take effect.

Non-material amendments — such as typographical corrections, clarifications of existing provisions, or updates to contact details — may be made without prior notice and will take effect immediately upon publication. The "Last Updated" date at the top of this policy will always reflect when the most recent change was made.

Your continued use of the tbaee Platform after the effective date of any amendment to this Privacy Policy constitutes your acknowledgement and acceptance of the updated terms. If you do not accept the revised policy, you should cease using the Platform and contact us at [email protected] to arrange Account closure.

14 Contact & Complaints

If you have any questions, concerns, or complaints about how tbaee processes your personal data, or if you wish to exercise any of your data rights as described in Section 10, please contact our support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: "Privacy Query" or "Data Rights Request"
• Live Chat: Available 24/7 via the tbaee platform dashboard after login
• WhatsApp: +880 1700 000000
• Response time: We aim to acknowledge all privacy-related queries within 48 hours and to provide a full response within 30 days.

When contacting us about a data matter, please include your registered account username and a clear description of your query or request. Providing as much detail as possible will help us process your request efficiently and accurately.

If you are not satisfied with our response to your privacy complaint, you have the right to escalate the matter to the relevant data protection authority or seek independent legal advice. tbaee is committed to resolving all privacy concerns fairly, transparently, and in accordance with applicable law.