tbazze Privacy Policy — How We Handle Your Personal Data
At tbazze, your privacy is a fundamental commitment, not an afterthought. This Privacy Policy explains exactly what personal data we collect from Bangladeshi players and other users, how we use and store that data, who we share it with, and how you can exercise your rights at any time. We encourage all players to read this document carefully before creating an account or using any service on the tbazze platform.
Six Principles That Guide Our Data Practices
Purpose Limitation
tbazze collects only the data that is strictly necessary to deliver our services to you. We do not collect data speculatively or for purposes unrelated to your account, safety, or legal compliance. Every data point we hold is collected for a specific, documented reason .
Data Minimisation
We request only the minimum amount of personal information required at each stage of your journey with tbazze — from registration through to KYC verification and withdrawal processing. We do not ask for data we do not need.
Security First
All data transmitted between your device and tbazze is protected by industry-standard SSL/TLS encryption. Sensitive account data is stored using hashed and salted techniques. Our infrastructure undergoes regular security audits to maintain the highest protection standards.
Your Rights Are Real
tbazze respects your right to access, correct, export, and delete your personal data. We provide clear mechanisms for exercising these rights and commit to responding to all verified data requests within 30 days of receipt.
No Unauthorised Selling
tbazze does not sell, rent, or trade your personal data to third-party advertisers or data brokers. Data is shared only with trusted service partners — such as payment processors and KYC providers — under strict contractual obligations that mirror our own privacy standards.
Transparency Always
We keep this Privacy Policy current and plainly written. Whenever we make a material change to our data practices, we update this document with a new effective date and notify registered players via their registered email address before the change takes effect.
Data We Collect
tbazze collects personal data in three main ways: information you provide directly when registering and using the platform, information generated automatically through your interaction with our services, and information received from trusted third-party partners involved in delivering our services. The categories of data we collect are described in detail below.
| Data Category | Specific Data Points | How It Is Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, government-issued ID number | Provided by you during registration and KYC verification |
| Contact Data | Mobile phone number, email address, residential address (city, district, postal code) | Provided by you during registration or account update |
| Financial Data | bKash / Nagad / Rocket / Upay wallet numbers, bank account identifiers, transaction history, deposit and withdrawal amounts | Provided by you when making deposits or requesting withdrawals |
| Account & Activity Data | Username, account ID, login timestamps, betting history, game session logs, bonus redemptions, preferences | Generated automatically by the tbazze platform as you use the service |
| Device & Technical Data | IP address, device type, operating system, browser type and version, screen resolution, time zone setting | Collected automatically via cookies and server logs on each visit |
| Communications Data | Support ticket content, live chat transcripts, email correspondence, survey responses | Collected when you contact tbazze customer support or participate in feedback surveys |
| KYC Verification Data | Copies of National ID (NID), passport, driving licence, utility bills, selfie or liveness check images | Provided by you during the identity verification process before first withdrawal |
Sensitive data: tbazze does not intentionally collect sensitive personal data such as health information, religious beliefs, or political opinions. If any such data is inadvertently disclosed to us via a support communication, it will not be processed for any purpose beyond resolving the specific support query and will be deleted thereafter.
How We Use Your Data
tbazze uses the personal data we collect only for clearly defined, legitimate purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The primary purposes for which we process your data are as follows:
- Account creation and management: To register your account, verify your identity, maintain your profile, and ensure your account remains secure and accessible to you.
- Service delivery: To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other approved channels; to calculate and credit winnings; to apply bonuses; and to deliver all core betting and gaming services on the platform.
- Age and identity verification (KYC): To confirm that all active players are aged 18 or above, and to verify that account details match the payment methods used, in accordance with our obligations under anti-money laundering (AML) and responsible gaming standards.
- Fraud prevention and security: To detect and prevent fraudulent activity, unauthorised account access, abuse of bonuses and promotions, money laundering, and any other activity that poses a risk to the integrity of the platform or the safety of other players.
- Customer support: To respond to your queries, complaints, and support requests, and to maintain records of communications for quality assurance and dispute resolution purposes.
- Platform improvement: To analyse aggregated usage data, game performance metrics, and player behaviour patterns in order to improve the features, content, and overall experience available on tbazze.
- Marketing communications: Where you have given explicit consent, to send you promotional communications about bonuses, new games, cricket betting markets, and seasonal offers via email or SMS. You may withdraw this consent at any time by contacting [email protected] or updating your communication preferences in your account settings.
- Legal and compliance obligations: To comply with applicable laws, respond to lawful requests from competent authorities, and to enforce our Terms & Conditions where necessary.
Marketing opt-out: If you no longer wish to receive promotional emails or SMS messages from tbazze, you can unsubscribe at any time using the unsubscribe link included in every marketing communication, or by sending a request to [email protected]. Opting out of marketing communications does not affect the delivery of transactional account notifications, which are required for the safe operation of your account.
Data Sharing & Disclosure
tbazze does not sell your personal data to any third party. We share data only where it is necessary to deliver our services, comply with legal obligations, or protect the security and integrity of the platform. The categories of third parties with whom we may share your data are described below.
- Payment service providers: We share relevant transaction data with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, and Mastercard to process your deposits and withdrawals. These providers operate under their own privacy policies and are bound by financial sector data protection standards.
- KYC and identity verification partners: We use third-party identity verification services to assist with document verification during the KYC process. These partners process your identity documents solely for the purpose of verification and are contractually prohibited from using your data for any other purpose.
- Game content providers: Game providers such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming may receive anonymised session and technical data necessary to deliver their game content within the tbazze platform. They do not receive your name, contact details, or financial data.
- Technology and infrastructure partners: Cloud hosting providers, content delivery networks (CDNs), cybersecurity firms, and analytics platforms that underpin the tbazze infrastructure may process certain technical and usage data as part of their service delivery. All such partners are bound by data processing agreements that restrict their use of your data.
- Legal and regulatory authorities: tbazze may disclose your personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law, court order, or in response to a lawful investigative request. We will notify you of such disclosure where we are legally permitted to do so.
- Business transfers: In the event of a merger, acquisition, or sale of all or part of the tbazze business, your personal data may be transferred as part of that transaction. We will notify registered players of any such transfer and the resulting changes to data controllership before the transfer takes effect.
Our commitment: Every third party that processes personal data on behalf of tbazze is required to sign a data processing agreement confirming that they will handle your data securely, use it only for the permitted purpose, and delete it when no longer required. We do not allow our partners to use your data for their own marketing or to share it with further parties without our explicit authorisation.
Data Retention & Storage
tbazze retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and compliance obligations. The following retention periods apply to the main categories of data we hold:
- Account and identity data: Retained for the duration of your active account relationship with tbazze, and for a further period of 5 years after account closure, in order to comply with anti-money laundering record-keeping obligations and to resolve any post-closure disputes.
- Financial and transaction data: Retained for 7 years from the date of each transaction, in line with standard financial record-keeping requirements applicable to international online gaming operators.
- KYC verification documents: Retained for 5 years from the date of verification or from account closure, whichever is later. After this period, document images are securely deleted and only a verification status record is retained.
- Customer support records: Retained for 3 years from the date of the last interaction, to support dispute resolution and quality assurance processes.
- Marketing consent records: Retained for the duration of your active marketing consent, and for 3 years after withdrawal of consent, as evidence of the consent given and the withdrawal request received.
- Technical and device data (logs): Server logs and access logs are retained for 90 days, after which they are automatically purged from our systems unless a security investigation requires their preservation for a longer period.
All tbazze player data is stored on secure servers located in data centres that meet internationally recognised physical and information security standards. Data is not transferred to jurisdictions that do not provide an adequate level of data protection without appropriate safeguards in place, such as contractual data protection clauses that replicate the protections described in this policy.
Your Privacy Rights
As a tbazze player, you have a set of clearly defined rights over your personal data. We are committed to honouring these rights and to making the process of exercising them as straightforward as possible. All rights requests should be submitted to [email protected] with the subject line "Privacy Rights Request" and include your registered account username and a description of your request.
Right of Access
You have the right to request a copy of all personal data that tbazze holds about you, along with information about how and why it is being processed.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
Right to Erasure
You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
Right to Restriction
You may request that we restrict the processing of your data — for example, while a dispute about its accuracy is being resolved — without requiring full deletion.
Right to Portability
Where technically feasible, you may request a machine-readable export of the personal data you have provided to tbazze, for the purpose of transferring it to another service.
Right to Object
You have the right to object to the processing of your data for direct marketing purposes at any time. You may also object to processing based on legitimate interests in certain circumstances.
tbazze will respond to all verified privacy rights requests within 30 calendar days of receipt. Where a request is complex or involves a high volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension within the initial 30-day window. We do not charge a fee for handling rights requests unless they are manifestly unfounded or repetitive.
Identity verification for rights requests: To protect your privacy and prevent unauthorised data access, tbazze will verify your identity before processing any data rights request. You will be asked to confirm your registered email address, account username, and in some cases to provide a copy of your government-issued ID. This verification step is a security measure taken in your interest, not a barrier to exercising your rights.
Data Security Measures
The security of your personal data is one of tbazze's highest operational priorities. We implement a layered security architecture that combines technical, organisational, and procedural safeguards to protect your data against unauthorised access, accidental loss, destruction, or disclosure.
- SSL/TLS encryption: All data transmitted between your browser or app and tbazze's servers is encrypted using current-generation Transport Layer Security (TLS 1.2 or higher). This ensures that your login credentials, financial data, and personal information cannot be intercepted in transit.
- Password hashing: Account passwords are never stored in plaintext. tbazze uses industry-standard adaptive hashing algorithms (bcrypt) combined with a unique per-account salt to store password data. Even in the unlikely event of a data breach, your actual password cannot be recovered from our stored hash.
- Two-factor authentication (2FA): All tbazze accounts support OTP-based 2FA via SMS or authenticator app. We strongly recommend enabling 2FA to add a second layer of protection to your account beyond your password alone.
- Access controls: Access to player personal data within tbazze's internal systems is restricted on a strict need-to-know basis. Only authorised personnel whose job roles require access to specific data categories are granted access, and all internal access events are logged and regularly audited.
- Regular security testing: tbazze conducts periodic vulnerability assessments and penetration testing of its platform infrastructure to identify and remediate security weaknesses before they can be exploited.
- Incident response: In the event of a confirmed personal data breach that is likely to result in a risk to your rights and freedoms, tbazze will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.
Your role in security: While tbazze implements robust security measures on our side, the security of your account also depends on the steps you take. Use a strong, unique password for your tbazze account, enable 2FA, never share your login credentials with anyone, and always log out from shared or public devices. If you suspect your account has been compromised, contact [email protected] immediately so we can take protective action.
Policy Updates & Contact
tbazze reviews this Privacy Policy at regular intervals and whenever there are material changes to our data practices, applicable regulations, or the services we offer. When we make a significant change to this policy, we will update the "Last Updated" date shown at the top of this page and send a notification to all registered players at their registered email address at least 14 days before the change takes effect, unless a shorter notice period is required by law.
We encourage all players to revisit this page periodically so that they remain aware of the current terms under which their data is being processed. Your continued use of the tbazze platform after the effective date of a revised policy constitutes your acceptance of the updated terms.
If you have any questions, concerns, or complaints about the way tbazze handles your personal data, or if you wish to exercise any of your privacy rights as described in Section 6, please contact our data protection team using the details below. We are committed to addressing all privacy-related enquiries fairly, promptly, and transparently.
Data Protection Contact:
Email: [email protected]
Subject line: "Privacy Policy Enquiry" or "Privacy Rights Request"
Response time: Within 5 business days for general enquiries; within 30 days for formal rights requests.
Support hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).
This Privacy Policy applies solely to data collected and processed by tbazze. It does not cover the data practices of third-party websites that may be linked from the tbazze platform. tbazze is not responsible for the privacy practices of any external site or service.
Play Securely at tbazze
Your data is protected and your privacy is respected. Explore Bangladesh's most complete English-language betting and casino platform — cricket, live casino, crash games, and slots with instant bKash deposits. Adults aged 18 and above only.