Your Privacy at tjbat

tjbat ("we", "us", "the Platform") is committed to protecting the privacy and personal data of every player who registers and plays on the tjbat platform at https://tjbat.onl. This Privacy Policy has been prepared to be transparent about our data practices and to clearly communicate the rights available to players under applicable data protection principles.

This policy applies to all personal data collected through the tjbat website, including data collected during registration, account use, payment processing, customer support interactions, and platform browsing. It applies to all players accessing the platform from Bangladesh and any other jurisdiction in which tjbat operates.

This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between you and tjbat. All three documents are accessible from the footer of every page on the platform.

The effective date of this policy is 1 January 2026. Any material changes to this policy will be communicated to registered players via email before the revised version takes effect.

tjbat collects personal data across several categories. The table below summarises the types of data we hold, the context in which it is collected, and the primary purpose for which it is used:

We do not collect sensitive personal data such as biometric data, health data, racial or ethnic origin, political opinions, religious beliefs, or sexual orientation. If any data of this nature is inadvertently provided by a player, it will be deleted without being processed.

tjbat collects personal data through the following channels:

• Direct submission: Data you provide when registering an account, completing KYC verification, submitting a deposit or withdrawal request, contacting customer support, or updating your account profile.
• Automated technical collection: Data collected automatically when you access the platform, including IP addresses, device identifiers, browser cookies, session tokens, and server logs. This collection occurs whether or not you are logged in to your account.
• Payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and partner banks when a deposit or withdrawal is processed. We receive only the data necessary to confirm and reconcile the transaction — we do not receive full payment credentials from these providers.
• Game providers: Aggregated game round data (bet amounts, game outcomes, session timestamps) received from certified game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe for the purpose of account statement accuracy and dispute resolution.
• Identity verification services: Confirmation results from document verification processes used during KYC, including the outcome of ID authenticity checks. We do not receive raw biometric scans from third-party verification services.

tjbat does not purchase personal data from data brokers, social media platforms, or any other external data sources.

We process your personal data only for purposes that are directly connected to our ability to operate the tjbat platform safely, fairly, and in compliance with our obligations. The specific purposes for which each category of data is processed are as follows:

• Account creation and management: To create, maintain, and administer your tjbat player account, including resetting passwords, handling account queries, and updating account status.
• Identity verification and age confirmation: To verify that you are aged 21 or over and that your identity matches the details provided during registration, as required by our responsible gaming obligations.
• Payment processing: To process deposit instructions and withdrawal requests via bKash, Nagad, Rocket, Upay, and supported bank transfer methods, and to maintain an accurate BDT transaction ledger for your account.
• Fraud prevention and platform security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, account takeover attempts, and other security threats to the platform and to individual players.
• Customer support and dispute resolution: To respond to support tickets, live chat enquiries, and formal complaints, and to maintain a record of correspondence for quality assurance and dispute evidence purposes.
• Responsible gaming monitoring: To identify patterns of play that may indicate problematic gambling behaviour and to apply responsible gaming tools (deposit limits, self-exclusion, reality checks) where a player has requested them or where our monitoring systems flag a concern.
• Legal and regulatory compliance: To meet any applicable legal obligations, respond to lawful requests from authorities, and maintain financial records for the minimum period required by applicable law.
• Platform improvement: To analyse aggregated, anonymised usage data for the purpose of improving the platform's performance, game selection, and user experience. This analysis does not involve individual player profiling for commercial purposes.
• Marketing communications (opt-in only): To send promotional offers, bonus notifications, and platform news to players who have explicitly opted in to receive such communications.

tjbat processes your personal data on one or more of the following legal bases depending on the specific processing activity involved:

• Contractual necessity: Processing that is necessary to perform our contract with you as a registered player — including account creation, payment processing, and KYC verification — is carried out on the basis of contractual necessity. Without this processing, we cannot provide the services you have signed up for.
• Legal obligation: Processing carried out to comply with applicable laws and regulations, including financial record-keeping, anti-money-laundering (AML) requirements, and responding to lawful requests from law enforcement or regulatory authorities.
• Legitimate interests: Processing carried out for fraud prevention, platform security, abuse detection, and responsible gaming monitoring, where our legitimate interest in maintaining a safe platform does not override your individual privacy rights.
• Consent: Processing of your data for direct marketing purposes is carried out only on the basis of your explicit, freely given consent. You may withdraw this consent at any time with no adverse effect on your account or access to the platform.

tjbat does not sell, rent, or disclose your personal data to third parties for commercial purposes. We share data only in the specific, limited circumstances described below:

• Payment service providers: Your name, registered mobile number or bank account number, and transaction amount are shared with bKash, Nagad, Rocket, Upay, and partner banks (including Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank) solely for the purpose of processing your requested deposit or withdrawal. These providers operate under their own published privacy policies and are independently regulated.
• Game providers: Minimal player identifiers (typically a pseudonymous player ID rather than your real name) are shared with game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe for the purpose of delivering real-money game sessions and resolving any game-related disputes. Game providers are contractually prohibited from using this data for any purpose other than service delivery.
• Identity verification services: Document images and identity data submitted during KYC are shared with our certified document verification partner solely for the purpose of confirming document authenticity and confirming your identity. Verification data is not retained by the third-party service beyond the duration of the verification check.
• Law enforcement and regulatory authorities: tjbat will disclose personal data to police, financial intelligence units, or other competent authorities where required to do so by a lawful request, court order, or applicable legal obligation. Where permitted by law, we will notify the affected player of such a disclosure.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of the assets of tjbat, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and any material change to this privacy policy that results from it.

All third parties with whom tjbat shares personal data are required to handle that data securely and in accordance with applicable data protection obligations. tjbat does not authorise any third party to use player data for their own independent commercial purposes.

tjbat retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or for as long as is required by applicable legal or regulatory obligations, whichever is longer. The following retention periods apply as a general guide:

• Active account data (identity, contact, financial data): Retained for the lifetime of your account plus a minimum of five years following account closure, in accordance with financial record-keeping obligations.
• KYC documents (ID copies, proof of address): Retained for a minimum of five years from the date of submission, or from the date of account closure, whichever is later.
• Transaction records (deposit and withdrawal history in BDT): Retained for a minimum of five years from the date of each transaction.
• Customer support communications (tickets, live chat logs, emails): Retained for three years from the date of last correspondence in a given support case.
• Technical and usage data (IP logs, session data, game history): Retained for a maximum of two years for fraud monitoring purposes, then deleted or fully anonymised.
• Marketing preference records: Retained for the lifetime of your account. Opt-out records are retained for five years after account closure to ensure suppression lists are maintained accurately.

When data reaches the end of its retention period, it is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual player. Players may request early deletion of their personal data, subject to the mandatory retention obligations described above — in such cases, only data that is not subject to a legal retention obligation will be deleted ahead of schedule.

The tjbat platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. The following categories of cookies are used on the platform:

• Strictly necessary cookies: These cookies are essential for the platform to operate and cannot be disabled. They include session authentication tokens, security tokens, and load-balancing identifiers. No personally identifiable information is stored in strictly necessary cookies.
• Functional cookies: These cookies remember your preferences — such as your language setting, preferred payment method, and responsible gaming tool configurations — so that you do not need to re-enter them on each visit. Functional cookies are set only for registered, logged-in players.
• Analytics cookies: These cookies collect aggregated, anonymised information about how players navigate the platform — which pages are most visited, how long sessions last, and where navigation errors occur. This data is used to improve the platform's structure and performance. No individual player is identifiable from analytics cookie data.
• Security and fraud detection cookies: These cookies assist our fraud detection systems by capturing device fingerprint data, including browser configuration and IP address patterns, to identify unusual access behaviour or suspected account takeover attempts.

tjbat does not use third-party advertising cookies, retargeting pixels, or social media tracking pixels on the platform. You can manage your cookie preferences through your browser settings, though disabling strictly necessary cookies will prevent you from logging in to your account.

tjbat implements a layered approach to data security, combining technical and procedural controls to protect your personal data against unauthorised access, accidental loss, or unlawful destruction. Our primary security measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the tjbat platform is encrypted in transit using industry-standard TLS 1.2 or higher. The tjbat domain is secured with an SSL certificate at all times.
• Encrypted data at rest: Personal data stored on tjbat servers is encrypted at rest. Database access credentials are stored using industry-standard hashing algorithms and are never stored in plain text.
• Access controls: Internal access to personal data is restricted to staff who require it to perform their role. All internal access is logged, and access permissions are reviewed regularly. No customer-facing staff have access to full payment credentials.
• Two-factor authentication (2FA): Players are strongly encouraged to enable two-factor authentication on their tjbat accounts as an additional layer of protection against unauthorised account access.
• Intrusion detection systems: The tjbat platform is monitored around the clock by automated intrusion detection systems that flag and respond to suspicious access patterns, brute-force login attempts, and other security anomalies.
• Data breach response: In the event of a confirmed personal data breach that poses a risk to player rights, tjbat will notify affected players without undue delay and will take immediate remedial action to contain the breach and prevent recurrence.

Despite these measures, no internet-connected platform can guarantee absolute security. Players are encouraged to use a strong, unique password for their tjbat account and to contact support immediately at [email protected] if they suspect unauthorised access to their account.

The tjbat platform integrates services provided by third parties to deliver specific functionality. Each third-party integration involves a degree of data exchange, as described below:

• Game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe): Game sessions are delivered via embedded interfaces hosted by the relevant provider. A pseudonymous session token is passed to the provider to initialise the game session. Game providers are certified by independent testing laboratories and operate under strict data handling agreements with tjbat.
• Payment processors (bKash, Nagad, Rocket, Upay, partner banks): Payment requests are routed through the relevant provider's API. Only the data necessary to initiate and confirm the transaction is shared. Player payment credentials (PINs, full account numbers beyond what is needed for routing) are never stored by tjbat.
• Content Delivery Network (CDN): Static platform assets (images, scripts, stylesheets) may be served via a third-party CDN to improve platform load speed. CDN providers receive your IP address as part of standard HTTP request routing but do not receive any personally identifiable account data.

The tjbat platform does not embed social media plugins, third-party advertising networks, or analytics services that would share your data with those third parties without your knowledge. All third-party providers used by tjbat are contractually bound to process data only as directed by tjbat and for no independent commercial purpose.

The tjbat platform is strictly intended for adults aged 21 years and over. tjbat does not knowingly collect personal data from any person under the age of 21. Age verification is conducted during the registration process and as part of the KYC verification procedure before a player's first withdrawal is processed.

If tjbat becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted immediately, the associated account will be suspended, and any real-money balance held in that account will be managed in accordance with our Terms & Conditions pending investigation.

If you are a parent or guardian and believe that a person under 21 in your household has registered an account on the tjbat platform using your payment details or identity documents, please contact support immediately at [email protected] so that we can investigate and take prompt corrective action.

As a player on the tjbat platform, you hold a range of rights over your personal data as summarised in the Player Rights section above. To exercise any of these rights, please contact us using the details in Section 14. All requests will be acknowledged within 5 business days and resolved within 30 calendar days of receipt, unless the complexity of the request requires an extension (in which case we will notify you).

When submitting a data rights request, please include:

• Your full registered name and tjbat account username
• The email address associated with your account
• A clear description of the right you wish to exercise (e.g., access, erasure, rectification)
• Any relevant context that will help us locate the specific data to which your request relates

We may need to verify your identity before processing your request. This is a security measure to ensure that personal data is not disclosed to, modified by, or deleted at the request of an unauthorised person. We will not charge a fee for handling data rights requests except where requests are manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

Please note that certain data rights — particularly the right to erasure — may be limited where the data in question is subject to a mandatory legal retention obligation (for example, financial transaction records that must be retained for five years). In such cases, we will explain the limitation clearly in our response to your request.

tjbat reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, applicable legal requirements, or the services we offer. The effective date displayed at the top of this policy will always reflect the date of the most recent revision.

Material changes — including changes that expand the categories of data we collect, introduce new purposes for processing, or alter the rights available to players — will be communicated to all registered players via the email address associated with their account at least 14 days before the revised policy takes effect.

Minor changes (including typographical corrections, formatting improvements, or clarifications that do not alter the substance of the policy) may be made without advance notice and will take effect immediately upon publication at https://tjbat.onl/privacy-policy. Continued use of the platform following publication of any revised policy constitutes your acceptance of the updated terms.

We encourage all players to check this page periodically so that they remain informed about how tjbat handles their personal data. If you have any questions about a specific update to this policy, please contact our support team before using the platform.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way tjbat handles your personal data, please contact our support team using the details below. All privacy-related enquiries are handled by our dedicated data protection team and are treated with strict confidentiality.

When contacting us about a privacy matter, please clearly state "Privacy Request" in the subject line of your email or at the start of your live chat message so that your enquiry can be routed to the correct team without delay. We aim to acknowledge all privacy-related contacts within one business day.