tjbaji Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how tjbaji ("we", "us", "our") collects, processes, stores, shares, and protects the personal data of individuals ("you", "your") who register for or use the tjbaji platform, accessible at tjbaji.pro (the "Platform"). This Policy forms part of the broader agreement between you and tjbaji and should be read alongside our Terms and Conditions.

We are committed to handling your personal data responsibly, lawfully, and transparently. By registering an account or using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, please discontinue use of the Platform.

2. Data Controller

tjbaji is the data controller responsible for the personal information you provide through the Platform. For any data protection queries, requests, or complaints, you may contact us directly at [email protected]. We will respond to all substantive data-related enquiries within 30 days of receipt.

3. Personal Data We Collect

We collect personal data through several channels: directly from you during registration and use of the Platform, automatically through cookies and technical systems, and from third-party service providers involved in payment processing and identity verification. The categories of data we may collect are set out below.

Category	Examples
Identity data	Full name, date of birth, national ID number, passport number, gender
Contact data	Email address, mobile number, residential address, city (e.g., Dhaka, Chittagong, Sylhet)
Account data	Username, encrypted password, account preferences, communication settings
Financial data	bKash / Nagad / Rocket / Upay wallet numbers, bank account details, transaction history, deposit and withdrawal records
Technical data	IP address, device type, operating system, browser type, session tokens, login timestamps
Usage data	Pages visited, games played, bets placed, session duration, feature interactions
Verification data	Copies of government-issued ID, proof of address documents, payment method proof (submitted during KYC)
Communications data	Support ticket content, live chat transcripts, email correspondence with our team

We do not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information. If you voluntarily disclose such information in a support communication, it will be used only to resolve your query and will not be retained beyond what is necessary for that purpose.

4. How We Use Your Personal Data

tjbaji uses personal data only for specific, documented purposes. We will not use your data for any purpose that is incompatible with the reason it was originally collected. Our primary purposes are as follows:

• Account creation and management: To register your account, verify your identity, maintain your profile, and manage your preferences.
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer, and to maintain accurate financial records.
• Identity verification (KYC): To comply with our Know Your Customer obligations, confirm your age (21+), and prevent the use of the Platform by ineligible individuals.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, account takeover attempts, and other security threats.
• Responsible gaming: To monitor gameplay patterns that may indicate problem gambling behaviour, and to apply limits or restrictions where appropriate.
• Customer support: To respond to your queries, resolve disputes, process complaints, and provide technical assistance.
• Platform improvement: To analyse aggregate usage data for the purpose of improving our games, features, navigation, and overall user experience.
• Legal compliance: To fulfil our obligations under applicable laws and to respond to lawful requests from regulatory or law enforcement authorities.
• Promotional communications: To send you offers, bonus notifications, and platform updates by email or on-site message — only where you have opted in to receive such communications.

We will never use your personal data to make fully automated decisions that significantly affect you without human oversight and without providing you with the opportunity to contest the decision.

5. Legal Basis for Processing

Every processing activity carried out by tjbaji is grounded in at least one of the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations to you as a registered player under our Terms and Conditions — including account management and payment processing.
• Legal obligation: Processing required to comply with applicable law, including anti-money laundering regulations, age verification requirements, and responses to lawful regulatory enquiries.
• Legitimate interests: Processing carried out to protect the Platform and other players from fraud, abuse, and security threats, provided such interests are not overridden by your fundamental rights.
• Consent: Processing for optional purposes such as marketing communications, where we have obtained your explicit consent and where you may withdraw that consent at any time.

6. Sharing Your Personal Data

tjbaji does not sell your personal data. We may, however, share it with carefully selected third parties in the following circumstances:

• Payment service providers: We share relevant financial data with payment processors (including mobile wallet operators and banks) solely to facilitate the transactions you request.
• Identity verification providers: We may use third-party KYC platforms to verify the documents you submit. These providers are contractually bound to use your data only for verification purposes.
• Game content providers: Third-party game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive technical session data necessary to deliver their games. They do not receive your identity or financial data.
• IT and hosting providers: Our platform is hosted on secure third-party infrastructure. Hosting providers receive technical access to system data but are not permitted to process personal data beyond what is necessary to provide hosting services.
• Legal and regulatory authorities: We may disclose personal data to law enforcement bodies, courts, or regulators where required by law or where we have a good-faith belief that disclosure is necessary to prevent fraud or protect the safety of our users.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of tjbaji's business, your personal data may be transferred to the relevant successor entity, subject to the same privacy protections described in this Policy.

All third parties with whom we share personal data are required to handle it in accordance with applicable data protection standards. We do not permit third parties to use your data for their own marketing purposes.

7. Cookies and Tracking Technologies

tjbaji uses cookies and similar technologies (such as local storage and session tokens) to operate and improve the Platform. Cookies are small text files stored on your device that help us remember your session, keep you logged in securely, and understand how the Platform is being used in aggregate.

The types of cookies we use include:

• Strictly necessary cookies: Required for the Platform to function. These cannot be disabled as they are essential for security and session management.
• Functional cookies: Used to remember your preferences, such as language settings and last-visited game categories.
• Analytics cookies: Used to collect aggregate, anonymised data about how visitors interact with the Platform. This data helps us identify areas for improvement but cannot be used to identify you personally.

We do not use third-party advertising or retargeting cookies. You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair the functionality of the Platform.

8. Data Retention

We retain your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Specific retention periods include:

• Account data: Retained for the duration of your account and for a period of five years following account closure, to satisfy financial record-keeping and anti-money laundering requirements.
• Transaction records: Retained for a minimum of five years from the date of each transaction.
• KYC documents: Retained for five years following the closure or verification of your account, or longer if required by applicable law.
• Support communications: Retained for two years from the date of your last interaction with our support team, unless retention for longer is required in connection with an ongoing dispute.
• Marketing consent records: Retained for as long as you remain a registered player and for a further two years after account closure, to demonstrate compliance with consent requirements.

Once a retention period has expired, data is securely deleted or anonymised so that it can no longer be associated with any individual.

9. Data Security

tjbaji implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and our servers
• Encryption of sensitive data fields (including passwords and payment details) at rest using industry-standard algorithms
• Role-based access controls ensuring that staff can only access the personal data necessary for their specific role
• Regular security audits, penetration testing, and vulnerability assessments of our Platform infrastructure
• Secure, geographically redundant data storage to protect against physical loss or disaster
• Strict onboarding and data handling training for all staff with access to personal data

While we take every reasonable precaution to secure your data, no system is entirely immune to risk. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay and take all necessary steps to mitigate the impact.

10. Your Rights

As a user of the tjbaji Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with your request. We will respond within 30 days.

• Right of access: You may request a copy of all personal data we hold about you, free of charge.
• Right to rectification: You may request that we correct any inaccurate or incomplete personal data we hold about you.
• Right to erasure: In certain circumstances, you may request that we delete your personal data. This right is subject to our legal obligations to retain certain records.
• Right to restriction: You may request that we restrict the processing of your personal data while a dispute or correction request is being resolved.
• Right to data portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interests, subject to our demonstrating compelling grounds to continue.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal.

11. International Data Transfers

tjbaji operates as an international platform. As a result, your personal data may be transferred to and processed in countries outside Bangladesh, including countries where data protection laws may differ from those in your home jurisdiction. Where such transfers occur, we ensure that appropriate safeguards are in place — including contractual protections with our service providers — to maintain an equivalent level of data protection to that described in this Policy.

12. Children and Minors

The tjbaji Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that a minor has registered an account or provided personal data, we will immediately close the account and securely delete all associated data. If you believe that a minor has used the Platform, please contact us at [email protected] so that we can investigate and act accordingly.

13. Third-Party Links

The tjbaji Platform may contain references to third-party game providers and payment services. Please be aware that we have no control over the privacy practices of third-party organisations, and this Policy applies only to the tjbaji Platform itself. We encourage you to review the privacy policies of any third-party services you interact with through our Platform.

14. Changes to This Privacy Policy

tjbaji reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, we will update the "Last updated" date at the top of this page and, where appropriate, notify registered players by email or via an in-platform notification. Your continued use of the Platform following the publication of any revised Policy constitutes your acceptance of the updated terms. We recommend reviewing this page periodically to stay informed.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data we hold about you, please contact the tjbaji privacy team at [email protected]. We are committed to resolving all privacy-related enquiries promptly and transparently.