Privacy Policy — tjbaji Platform

tjbaji ("we", "us", "our") operates the online betting and casino platform accessible at tjbaji.app and associated mobile browser interfaces (collectively, the "Platform"). This Privacy Policy describes in detail how tjbaji collects, processes, stores, discloses, and safeguards the personal data of individuals who register for and use our services ("you", "your", "player").

By creating a tjbaji account or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should not use the tjbaji Platform.

This Privacy Policy is to be read in conjunction with tjbaji's Terms & Conditions, available at tjbaji.app/terms-conditions, and our Responsible Gaming Policy, available at tjbaji.app/responsible-gaming. All three documents together form the complete framework of your relationship with tjbaji as a registered player.

tjbaji collects personal data through two primary channels: information you provide directly to us, and information collected automatically when you use the Platform. The categories of personal data we process are set out below.

Data You Provide Directly:

• Registration Data: Full name, date of birth, username, email address, mobile phone number, and residential address (including city, district, and postal code within Bangladesh).
• Identity Verification Data: National Identity Card (NID) number, passport number, or other government-issued identification document details and images submitted during account verification.
• Payment Data: Mobile wallet account numbers (bKash, Nagad, Rocket, Upay), bank account details, and card information (Visa, Mastercard) used for deposits and withdrawals. Full card numbers are never stored by tjbaji; card data is handled by our payment processor partners.
• Communications Data: Messages, queries, and attachments sent to our support team via live chat or email.
• Responsible Gaming Data: Self-exclusion requests, deposit limit settings, session time preferences, and cooling-off period requests submitted through the account dashboard or support team.

Data Collected Automatically:

tjbaji processes your personal data only for specific, defined purposes. We do not process data in a manner that is incompatible with the purposes for which it was originally collected. The primary purposes for which we use your data are as follows:

• Account Creation and Management: To register your player account, verify your identity, manage your profile, and maintain your account settings and preferences on the tjbaji Platform.
• Service Delivery: To process deposits and withdrawals, settle bets, credit winnings, operate casino game sessions, and provide all core Platform functionality that constitutes the tjbaji service.
• Identity and Age Verification: To confirm that you are at least 18 years of age and to verify your identity in compliance with our know-your-customer (KYC) obligations. This is a mandatory requirement for operating a responsible platform.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, multi-accounting, bonus abuse, and other harmful conduct. This includes automated monitoring of account behaviour and transaction patterns.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide assistance related to your tjbaji account and gaming experience.
• Responsible Gaming: To administer self-exclusion requests, enforce deposit limits, apply session time restrictions, and monitor account activity for indicators of problem gambling behaviour.
• Legal and Regulatory Compliance: To maintain financial transaction records, respond to lawful requests from competent authorities, and fulfil obligations under applicable anti-money laundering (AML) legislation and data protection requirements.
• Platform Improvement: To analyse usage patterns, identify technical issues, test new features, and continuously improve the performance, security, and user experience of the tjbaji Platform.
• Marketing Communications: Where you have given explicit consent, to send you promotional offers, bonus notifications, and news about tjbaji services. You may withdraw this consent at any time from your account settings.

tjbaji processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between you and tjbaji — specifically, to operate your account, process your transactions, deliver gaming services, and honour withdrawal requests.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including identity verification, age verification, anti-money laundering record-keeping, and responses to lawful authority requests.
• Legitimate Interests: Processing conducted for tjbaji's legitimate business interests where those interests are not overridden by your rights and freedoms — including fraud prevention, platform security monitoring, and service analytics.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for optional marketing communications. You have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

tjbaji does not sell or rent your personal data to third parties. We may, however, share your data with carefully selected third parties in the following circumstances:

• Payment Processors: We share necessary payment data with our payment processing partners — including the operators of bKash, Nagad, Rocket, and Upay integrations, as well as Visa and Mastercard processing networks — to facilitate deposits and withdrawals. These partners process your payment data under their own privacy policies and security standards.
• Game Content Providers: We share session data (such as account identifiers and wager amounts) with our licensed game content suppliers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — to deliver their games on the tjbaji Platform. These providers operate as data processors under contractual agreements with tjbaji.
• Identity Verification Services: We may use third-party KYC service providers to assist with identity document verification and age verification checks. These providers process identity data solely on tjbaji's behalf under binding data processing agreements.
• Analytics Providers: We use aggregated, anonymised, or pseudonymised usage data with analytics service providers to understand Platform performance and user behaviour. No personally identifiable information is shared with analytics partners beyond what is required for this purpose.
• Law Enforcement and Regulatory Authorities: We will disclose personal data to competent law enforcement authorities, regulatory bodies, or courts where we are legally required to do so, or where disclosure is necessary to protect the safety of players or the integrity of the Platform.
• Business Transfers: In the event of a merger, acquisition, or sale of tjbaji's business assets, player data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained and players being notified in advance.

tjbaji uses cookies and similar tracking technologies on the Platform to ensure core functionality, improve user experience, and gather anonymised analytics data. Cookies are small text files placed on your device by the Platform when you visit. They do not contain executable code or personally sensitive information on their own.

The following categories of cookies are used on the tjbaji Platform:

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform — for example, you may need to log in again on each visit if session cookies are disabled. Marketing cookies may be opted out of from your account settings page.

tjbaji retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including legal, regulatory, and compliance obligations. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your registered account being active on the Platform, plus a minimum of five (5) years following account closure to meet financial record-keeping and AML compliance requirements.
• Identity Verification Documents: Retained for a minimum of five (5) years following account closure, in accordance with applicable know-your-customer and anti-money laundering regulatory obligations.
• Transaction Records: Retained for a minimum of five (5) years following the date of each transaction for financial audit and regulatory compliance purposes.
• Support Communications: Retained for three (3) years from the date of the last communication for dispute resolution and quality assurance purposes.
• Marketing Consent Records: Retained for the period of consent plus three (3) years to demonstrate compliance with consent requirements, even after withdrawal of consent.
• Analytics Data: Aggregated and anonymised analytics data may be retained indefinitely as it no longer constitutes personal data once fully anonymised.

Following the applicable retention period, personal data is securely deleted or permanently anonymised in a manner that prevents reconstruction of the original personal information. Where deletion is not immediately possible due to backup system constraints, data is isolated and protected from further active processing until it can be deleted.

tjbaji takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our key security measures include:

• SSL/TLS Encryption: All data transmitted between your device and the tjbaji Platform is protected by industry-standard 256-bit SSL/TLS encryption. This applies to all pages, including the login interface, cashier, and account settings.
• Password Hashing: Account passwords are stored using strong one-way cryptographic hashing algorithms. tjbaji staff cannot view your password in plain text.
• Access Controls: Access to personal data systems is restricted to authorised personnel only, on a strict need-to-know basis. All internal access is logged and audited.
• Infrastructure Security: tjbaji's servers and data storage systems are hosted in secure data centre facilities with physical access controls, redundant power systems, and 24/7 monitoring.
• Fraud Detection Systems: Automated monitoring systems flag unusual account behaviour, abnormal transaction patterns, and potential account compromise attempts for review by our security team.
• Incident Response: In the event of a data security incident, tjbaji has an incident response plan in place to contain the breach, assess the impact, and notify affected players and relevant authorities within required timeframes.

As a player on the tjbaji Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] or via live chat from your account dashboard.

• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is being processed and the purposes for which it is used.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data we hold about you. For basic account details, you can update this information directly through your account settings dashboard.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. This right is subject to our legal and regulatory obligations to retain financial records and KYC documentation.
• Right to Restrict Processing: You have the right to request that we limit the way in which we process your personal data in specific circumstances, such as where you contest the accuracy of the data or where you have objected to processing.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, and the right to object at any time to the processing of your personal data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

tjbaji will respond to all valid data rights requests within thirty (30) calendar days. In complex cases, this period may be extended by up to a further sixty (60) days, in which case we will notify you of the extension and the reason for it within the initial thirty-day period.

The tjbaji Platform is strictly for adults aged 18 years and above. We do not knowingly collect, process, or store personal data belonging to individuals under the age of 18. Registration on the Platform is prohibited for minors, and age verification checks are conducted as part of the account registration and ongoing KYC process.

If we become aware that personal data has been collected from an individual who is under 18 years of age, we will take immediate steps to delete that data, close the associated account, and withhold any funds pending investigation. If you are a parent or guardian and believe that your child has registered on the tjbaji Platform, please contact us immediately at [email protected].

We encourage parents and guardians to use parental control software to restrict access to online gambling platforms and to have open conversations with minors about the risks of gambling. For further guidance, please visit our Responsible Gaming page.

The tjbaji Platform may contain references to or integrations with third-party services, including game content providers and payment processors. While we take care to work only with reputable and trusted partners, tjbaji does not control and is not responsible for the privacy practices or content of third-party services.

When you interact with a third-party service accessed through or in connection with tjbaji — for example, when processing a bKash or Nagad payment — you are subject to that third party's own privacy policy and terms of service. We strongly recommend that you review the privacy policies of any third-party services you use in connection with your tjbaji account.

Game content delivered on the tjbaji Platform by providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may involve those providers collecting anonymised session data to operate their games. This is governed by our data processing agreements with those providers and does not result in those providers having access to your full personal profile.

tjbaji reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or business operations. The most current version of this Policy will always be available at tjbaji.app/privacy-policy, along with the date on which it was last updated.

Where a change to this Policy is material — meaning it significantly affects how we process your personal data or reduces your privacy protections — we will endeavour to provide reasonable advance notice via a prominent notice on the Platform or by email to your registered address. However, it remains your responsibility to review this Policy periodically.

Your continued use of the tjbaji Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you should cease using the Platform and may request account closure by contacting our support team.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way in which tjbaji processes your personal data, please reach out to our support team through one of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available from your tjbaji account dashboard, 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)

For matters specifically relating to your data rights — such as access requests, rectification requests, or erasure requests — please include "Data Rights Request" in the subject line of your email or in your opening live chat message so that our team can route your query to the appropriate team without delay.