tjbd Privacy Policy — How We Collect, Use & Protect Your Personal Data

1. Introduction

This Privacy Policy ("Policy") describes how tjbd ("tjbd", "We", "Us", "Our"), the operator of the online casino and sports betting platform at tjbd.io (the "Platform"), collects, uses, stores, and discloses personal information about individuals ("Player", "You", "Your") who register for, access, or use any part of the Platform.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are accessible via this website. By creating a tjbd account or otherwise using the Platform, you acknowledge that you have read and understood this Policy and agree to the processing of your personal data as described herein.

We are committed to protecting the privacy and personal data of all players, particularly those based in Bangladesh. Our practices are guided by internationally recognised data protection principles, including purpose limitation, data minimisation, storage limitation, and integrity and confidentiality.

2. Data We Collect

2.1 Information You Provide Directly

When you register an account with tjbd or interact with our support team, you may provide the following categories of personal information:

• Identity data: Full legal name, date of birth, gender, and nationality.
• Contact data: Email address, mobile phone number, and residential address (including district, city, and postcode) within Bangladesh.
• Identity verification (KYC) data: Copies of government-issued identification documents such as your Bangladeshi National Identity Card (NID), passport, or driving licence; utility bills or bank statements as proof of address.
• Financial data: Mobile banking account references (e.g., bKash account number, Nagad wallet ID, Rocket number), bank account details where applicable, transaction history on the Platform, deposit and withdrawal amounts.
• Account credentials: Username and encrypted password hash. We never store your password in plain text.
• Communications data: Records of your correspondence with our support team, including live chat transcripts, email exchanges, and any feedback or complaints submitted.

2.2 Information Collected Automatically

When you access or use the tjbd Platform, certain technical and behavioural data is collected automatically by our systems:

• Device and connection data: IP address, browser type and version, operating system, device model, screen resolution, and time zone (Bangladesh Standard Time, UTC+6).
• Usage data: Pages visited, games played, bets placed (including stake amounts, outcomes, and timestamps), session duration, click patterns, and navigation paths through the Platform.
• Log data: Server access logs, error logs, and security event logs used to maintain the stability and integrity of the Platform.
• Geolocation data: Approximate location derived from your IP address, used to verify eligibility and comply with regional access controls. We do not collect precise GPS-level location data.

2.3 Information from Third Parties

We may receive personal data about you from the following third-party sources:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and Islami Bank may share transaction confirmation data with us to facilitate deposits and withdrawals.
• Identity verification providers: Third-party KYC and anti-money-laundering (AML) services may provide verification results and risk scores relating to your submitted identity documents.
• Fraud prevention services: We may receive information from shared fraud databases to protect the Platform and its players from fraudulent or criminal activity.

3. How We Use Your Data

tjbd uses the personal data we collect for the following specific purposes. We do not use your data for any purpose that is incompatible with those listed here without first obtaining your consent or being required to do so by law.

Purpose	Data Used	Legal Basis
Create and manage your player account	Identity, contact, credentials	Contract performance
Process deposits and withdrawals	Financial, identity, KYC data	Contract performance
Verify your age and identity (KYC)	Identity, KYC documents	Legal obligation
Detect and prevent fraud, money laundering, and cheating	All categories	Legal obligation / Legitimate interest
Provide customer support	Identity, contact, communications data	Contract performance
Send transactional notifications (deposits, withdrawals, account alerts)	Contact, financial data	Contract performance
Send promotional communications and personalised offers	Contact, usage, financial data	Consent
Monitor responsible gaming and apply player protections	Usage, financial, behavioural data	Legal obligation / Legitimate interest
Improve Platform performance and user experience	Usage, device, log data	Legitimate interest
Comply with legal, regulatory, and law enforcement obligations	All categories as required	Legal obligation

4. Legal Basis for Processing

We process your personal data under one or more of the following legal bases depending on the specific activity:

• Contract performance: Processing is necessary to fulfil our obligations to you under the Terms & Conditions — for example, operating your account, processing payments, and delivering casino games and betting services.
• Legal obligation: Processing is required to comply with applicable laws — including anti-money-laundering (AML) regulations, know-your-customer (KYC) requirements, and reporting obligations to law enforcement or regulatory authorities.
• Legitimate interest: Processing is necessary for our legitimate business interests, such as fraud detection, platform security, analytics, and responsible gaming monitoring, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on consent — primarily for sending promotional emails or SMS messages — you may withdraw that consent at any time by contacting us at [email protected]. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

5. Data Sharing & Disclosure

5.1 Service Providers & Processors

We share personal data with a limited number of carefully selected third-party service providers who process data on our behalf and under our instructions. These include:

• Payment processors and mobile banking partners (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank) — for transaction processing.
• Identity verification and KYC providers — for age verification and document authentication.
• Cloud hosting and server infrastructure providers — for secure data storage and platform operation.
• Customer support software providers — for managing live chat and email support interactions.
• Fraud detection and AML screening services — for protecting the Platform and its players from criminal activity.
• Game studio providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) — these studios may receive limited technical identifiers (such as a player session token) to deliver game content; they do not receive your full identity profile.

5.2 Legal Disclosure

We may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where we are legally required or permitted to do so — for example, in response to a valid court order, to investigate suspected money laundering or fraud, or to protect the safety of our players and staff.

5.3 Business Transfers

In the event that tjbd undergoes a merger, acquisition, or sale of all or substantially all of its assets, player data may be transferred to the acquiring entity as part of that transaction. You will be notified via email and a prominent Platform notice at least 30 days before any such transfer takes effect, and you will have the opportunity to close your account if you do not wish your data to be transferred.

5.4 What We Will Never Do

tjbd will never sell, rent, or trade your personal data to third-party advertisers, data brokers, or marketing companies. We will never share your personal information with other gambling operators for cross-promotional purposes without your explicit consent.

6. Cookies & Tracking Technologies

tjbd uses cookies and similar tracking technologies on the Platform to provide core functionality, improve performance, and understand how players use our services. The following categories of cookies are used:

• Essential cookies: Required for the Platform to function correctly. These include session authentication cookies, security tokens, and load balancing identifiers. These cannot be disabled without breaking the Platform.
• Functional cookies: Remember your preferences such as language settings and display options to personalise your experience across sessions.
• Analytics cookies: Collect anonymised data about how players navigate the Platform — such as which games are most popular, where players drop off during the deposit flow, and which pages generate the most engagement. This data is used solely to improve the Platform.
• Security cookies: Help detect and prevent suspicious login activity, credential stuffing attacks, and other security threats by fingerprinting session characteristics.

We do not use third-party advertising or retargeting cookies. You can manage cookie preferences through your browser settings, though disabling essential cookies will impair the Platform's ability to function correctly for your account.

7. Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention schedule applies:

• Active account data (identity, contact, financial): Retained for the full duration of your account plus 5 years following account closure, in accordance with AML and financial record-keeping obligations.
• KYC documents: Retained for 5 years after the date of submission or account closure, whichever is later.
• Transaction records: Retained for 5 years after the transaction date.
• Customer support communications: Retained for 2 years after the last interaction, or longer if the communication relates to an ongoing dispute or investigation.
• Usage and behavioural analytics data: Anonymised after 12 months and retained in aggregate form for a further 3 years for trend analysis.
• Marketing consent records: Retained for 3 years from the date consent was given or last renewed, or until consent is withdrawn, whichever is earlier.

When the applicable retention period expires, personal data is securely deleted using industry-standard data erasure methods or, where deletion is not technically feasible, irreversibly anonymised so that it can no longer be associated with you.

8. Security Measures

The security of your personal data is a top priority for tjbd. We implement a comprehensive, layered security framework that includes:

• Encryption in transit: All communications between your device and our servers are encrypted using TLS 1.2 or higher, ensuring that data cannot be intercepted during transmission.
• Encryption at rest: Sensitive data fields — including financial information and identity document images — are encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data by tjbd staff is restricted on a strict need-to-know basis. All data access is logged and periodically audited.
• Two-factor authentication: All internal systems containing personal data require multi-factor authentication for staff access. Players are encouraged to enable SMS-based two-factor authentication on their accounts.
• Regular security assessments: Our platform undergoes periodic vulnerability assessments and penetration testing by qualified security professionals.
• Incident response: We maintain a documented data breach response plan. In the event of a data breach that is likely to result in risk to your rights or freedoms, we will notify you without undue delay and within the timeframe required by applicable law.

9. Your Privacy Rights

As a tjbd player, you have the following rights with respect to your personal data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Privacy Rights Request", along with sufficient information to verify your identity. We will respond to all verified requests within 30 calendar days.

• Right of access: You may request a copy of all personal data we hold about you, along with information about how it is processed.
• Right to rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request its correction or completion.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to our legal obligations to retain certain data (e.g., financial records for AML compliance).
• Right to restrict processing: You may request that we temporarily pause the processing of your personal data in certain circumstances — for example, while a rectification request is under review.
• Right to object: You may object to processing carried out on the basis of legitimate interest, including profiling for responsible gaming monitoring purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. This will not affect the lawfulness of processing carried out prior to withdrawal.
• Right to data portability: You may request your personal data in a structured, commonly used, machine-readable format (e.g., CSV or JSON) where processing is based on consent or contract performance and is carried out by automated means.

10. Minors & Age Verification Policy

The tjbd Platform is strictly intended for adults aged 21 years and over. We do not knowingly collect or process personal data from individuals under the age of 21. Age verification is a mandatory step in our registration and KYC process, and accounts where the holder is found to be under 21 will be immediately suspended.

If you are a parent or guardian and believe that a person under 21 in your care has created a tjbd account, please contact us immediately at [email protected] with details so that we can investigate and take appropriate action, including account closure and return of any deposited funds where applicable.

11. International Data Transfers

tjbd primarily stores and processes personal data within secure data centres. Where personal data is transferred to, or accessed by, service providers located outside Bangladesh, we take appropriate measures to ensure that such transfers are subject to adequate data protection safeguards. These measures may include contractual clauses that impose data protection obligations equivalent to those described in this Policy on the receiving party.

We do not transfer your personal data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate safeguards. Our payment processing partners — including bKash, Nagad, and Rocket — are Bangladeshi entities and process data primarily within Bangladesh.

12. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, Platform features, or applicable legal requirements. When we make material changes, we will:

• Update the "Last updated" date at the top of this Policy.
• Send an email notification to all registered players at the address on file, at least 14 days before the changes take effect.
• Display a prominent notice on the Platform homepage for a minimum of 14 days prior to the effective date of the revised Policy.

Your continued use of the tjbd Platform after the effective date of a revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not accept the revised Policy, you may close your account by contacting our support team.

13. Contact & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or about the way in which tjbd handles your personal data, please contact our support team. We take all privacy-related enquiries seriously and will respond within 2 business days (Bangladesh Standard Time, UTC+6) for general queries, and within 30 days for formal data rights requests.

If you are not satisfied with our response to your privacy complaint, you have the right to escalate the matter to the relevant data protection authority in Bangladesh or to seek independent legal advice regarding your rights under applicable law.